1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
/***************************************************************/
/* perk: PE Resource Kit */
/* Copyright (C) 2015--2016 Z. Gilboa */
/* Released under GPLv2 and GPLv3; see COPYING.PERK. */
/***************************************************************/
#include <stdint.h>
#include <stdbool.h>
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <errno.h>
#include <perk/perk.h>
#include <perk/perk_output.h>
#include "perk_errinfo_impl.h"
static const char const * pe_subsystem_name[0x10] = {
[PE_IMAGE_SUBSYSTEM_UNKNOWN] = "unknown",
[PE_IMAGE_SUBSYSTEM_NATIVE] = "native",
[PE_IMAGE_SUBSYSTEM_WINDOWS_GUI] = "windows",
[PE_IMAGE_SUBSYSTEM_WINDOWS_CUI] = "console",
[PE_IMAGE_SUBSYSTEM_POSIX_CUI] = "posix",
[PE_IMAGE_SUBSYSTEM_WINDOWS_CE_GUI] = "wince",
[PE_IMAGE_SUBSYSTEM_EFI_APPLICATION] = "efi_app",
[PE_IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER] = "efi_driver",
[PE_IMAGE_SUBSYSTEM_EFI_ROM] = "efi_rom",
[PE_IMAGE_SUBSYSTEM_XBOX] = "xbox"
};
static const char * pretty_abi(const struct pe_unit_ctx * uctx)
{
switch (uctx->meta->opt.std.magic) {
case PE_MAGIC_PE32:
return "PE32";
case PE_MAGIC_PE32_PLUS:
return "PE64";
default:
return "INTERNAL_ERROR";
}
}
static const char * pretty_type(const struct pe_unit_ctx * uctx)
{
if (uctx->meta->coff.characteristics & PE_IMAGE_FILE_DLL)
return "dll";
else
return "exe";
}
static const char * pretty_subsystem(const struct pe_unit_ctx * uctx)
{
if (uctx->meta->opt.img.subsystem >= 0x10)
return "UNEXPECTED_SUBSYSTEM";
else if (!pe_subsystem_name[uctx->meta->opt.img.subsystem])
return "UNEXPECTED_SUBSYSTEM";
else
return pe_subsystem_name[uctx->meta->opt.img.subsystem];
}
int pe_output_image_type(
const struct pe_driver_ctx * dctx,
const struct pe_unit_ctx * uctx,
FILE * fout)
{
struct pe_info_string framework;
const struct pe_image_meta * meta = uctx->meta;
if (!fout)
fout = stdout;
pe_get_image_framework(meta,&framework);
if (dctx->cctx->fmtflags & PERK_PRETTY_YAML) {
if (fprintf(fout,"%s:\n- %s:\n- %s:\n- %s:\n- %s:\n",
*uctx->path,
pretty_abi(uctx),
pretty_type(uctx),
pretty_subsystem(uctx),
framework.buffer) < 0)
return PERK_FILE_ERROR(dctx);
} else {
if (fprintf(fout,"%s-%s-%s-%s\n",
pretty_abi(uctx),
pretty_type(uctx),
pretty_subsystem(uctx),
framework.buffer) < 0)
return PERK_FILE_ERROR(dctx);
}
return 0;
}
|
