tools/winedump/dump.c

   1 /*
   2  *      File dumping utility
   3  *
   4  *      Copyright 2001,2007 Eric Pouech
   5  *
   6  * This library is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU Lesser General Public
   8  * License as published by the Free Software Foundation; either
   9  * version 2.1 of the License, or (at your option) any later version.
  10  *
  11  * This library is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * Lesser General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Lesser General Public
  17  * License along with this library; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  19  */
  20
  21 #include "config.h"
  22
  23 #include <stdlib.h>
  24 #include <stdarg.h>
  25 #include <stdio.h>
  26 #include <time.h>
  27
  28 #include "../tools.h"
  29 #include "windef.h"
  30 #include "winbase.h"
  31 #include "winedump.h"
  32
  33 void *dump_base = NULL;
  34 size_t dump_total_len = 0;
  35
  36 void dump_data( const unsigned char *ptr, unsigned int size, const char *prefix )
  37 {
  38     unsigned int i, j;
  39
  40     printf( "%s%08x: ", prefix, 0 );
  41     if (!ptr)
  42     {
  43         printf("NULL\n");
  44         return;
  45     }
  46     for (i = 0; i < size; i++)
  47     {
  48         printf( "%02x%c", ptr[i], (i % 16 == 7) ? '-' : ' ' );
  49         if ((i % 16) == 15)
  50         {
  51             printf( " " );
  52             for (j = 0; j < 16; j++)
  53                 printf( "%c", isprint(ptr[i-15+j]) ? ptr[i-15+j] : '.' );
  54             if (i < size-1) printf( "\n%s%08x: ", prefix, i + 1 );
  55         }
  56     }
  57     if (i % 16)
  58     {
  59         printf( "%*s ", 3 * (16-(i%16)), "" );
  60         for (j = 0; j < i % 16; j++)
  61             printf( "%c", isprint(ptr[i-(i%16)+j]) ? ptr[i-(i%16)+j] : '.' );
  62     }
  63     printf( "\n" );
  64 }
  65
  66 static char* dump_want_n(unsigned sz)
  67 {
  68     static char         buffer[64 * 1024];
  69     static unsigned     idx;
  70     char*               ret;
  71
  72     assert(sz < sizeof(buffer));
  73     if (idx + sz >= sizeof(buffer)) idx = 0;
  74     ret = &buffer[idx];
  75     idx += sz;
  76     return ret;
  77 }
  78
  79 const char *get_time_str(unsigned long _t)
  80 {
  81     const time_t    t = (const time_t)_t;
  82     const char      *str = ctime(&t);
  83     size_t          len;
  84     char*           buf;
  85
  86     if (!str) return "not valid time";
  87
  88     len = strlen(str);
  89     /* FIXME: I don't get the same values from MS' pedump running under Wine...
  90      * I wonder if Wine isn't broken wrt to GMT settings...
  91      */
  92     if (len && str[len-1] == '\n') len--;
  93     buf = dump_want_n(len + 1);
  94     if (buf)
  95     {
  96         memcpy( buf, str, len );
  97         buf[len] = 0;
  98     }
  99     return buf;
 100 }
 101
 102 unsigned int strlenW( const WCHAR *str )
 103 {
 104     const WCHAR *s = str;
 105     while (*s) s++;
 106     return s - str;
 107 }
 108
 109 void dump_unicode_str( const WCHAR *str, int len )
 110 {
 111     if (len == -1) len = strlenW( str );
 112     printf( "L\"");
 113     while (len-- > 0 && *str)
 114     {
 115         WCHAR c = *str++;
 116         switch (c)
 117         {
 118         case '\n': printf( "\\n" ); break;
 119         case '\r': printf( "\\r" ); break;
 120         case '\t': printf( "\\t" ); break;
 121         case '"':  printf( "\\\"" ); break;
 122         case '\\': printf( "\\\\" ); break;
 123         default:
 124             if (c >= ' ' && c <= 126) putchar(c);
 125             else printf( "\\u%04x",c);
 126         }
 127     }
 128     printf( "\"" );
 129 }
 130
 131 const char* get_symbol_str(const char* symname)
 132 {
 133     const char* ret = NULL;
 134
 135     if (!symname) return "(nil)";
 136     if (globals.do_demangle) ret = demangle( symname );
 137     return ret ? ret : symname;
 138 }
 139
 140 const char* get_guid_str(const GUID* guid)
 141 {
 142     char* str;
 143
 144     str = dump_want_n(39);
 145     if (str)
 146         sprintf(str, "{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}",
 147                 (unsigned int)guid->Data1, guid->Data2, guid->Data3,
 148                 guid->Data4[0], guid->Data4[1], guid->Data4[2], guid->Data4[3],
 149                 guid->Data4[4], guid->Data4[5], guid->Data4[6], guid->Data4[7]);
 150     return str;
 151 }
 152
 153 const char *get_unicode_str( const WCHAR *str, int len )
 154 {
 155     char *buffer;
 156     int i = 0;
 157
 158     if (!str) return "(null)";
 159     if (len == -1) len = strlenW( str );
 160     buffer = dump_want_n( len * 6 + 3);
 161     buffer[i++] = '"';
 162     while (len-- > 0 && *str)
 163     {
 164         WCHAR c = *str++;
 165         switch (c)
 166         {
 167         case '\n': strcpy( buffer + i, "\\n" );  i += 2; break;
 168         case '\r': strcpy( buffer + i, "\\r" );  i += 2; break;
 169         case '\t': strcpy( buffer + i, "\\t" );  i += 2; break;
 170         case '"':  strcpy( buffer + i, "\\\"" ); i += 2; break;
 171         case '\\': strcpy( buffer + i, "\\\\" ); i += 2; break;
 172         default:
 173             if (c >= ' ' && c <= 126) buffer[i++] = c;
 174             else i += sprintf( buffer + i, "\\u%04x",c);
 175         }
 176     }
 177     buffer[i++] = '"';
 178     buffer[i] = 0;
 179     return buffer;
 180 }
 181
 182 const void*     PRD(unsigned long prd, unsigned long len)
 183 {
 184     return (prd + len > dump_total_len) ? NULL : (const char*)dump_base + prd;
 185 }
 186
 187 unsigned long Offset(const void* ptr)
 188 {
 189     if (ptr < dump_base) {printf("<<<<<ptr below\n");return 0;}
 190     if ((const char *)ptr >= (const char*)dump_base + dump_total_len) {printf("<<<<<ptr above\n");return 0;}
 191     return (const char *)ptr - (const char *)dump_base;
 192 }
 193
 194 static const struct dumper
 195 {
 196     enum FileSig        kind;
 197     enum FileSig        (*get_kind)(void);
 198     file_dumper         dumper; /* default dump tool */
 199 }
 200 dumpers[] =
 201 {
 202     {SIG_DOS,           get_kind_exec,  dos_dump},
 203     {SIG_PE,            get_kind_exec,  pe_dump},
 204     {SIG_DBG,           get_kind_dbg,   dbg_dump},
 205     {SIG_PDB,           get_kind_pdb,   pdb_dump},
 206     {SIG_NE,            get_kind_exec,  ne_dump},
 207     {SIG_LE,            get_kind_exec,  le_dump},
 208     {SIG_COFFLIB,       get_kind_lib,   lib_dump},
 209     {SIG_MDMP,          get_kind_mdmp,  mdmp_dump},
 210     {SIG_LNK,           get_kind_lnk,   lnk_dump},
 211     {SIG_EMF,           get_kind_emf,   emf_dump},
 212     {SIG_EMFSPOOL,      get_kind_emfspool, emfspool_dump},
 213     {SIG_MF,            get_kind_mf,    mf_dump},
 214     {SIG_FNT,           get_kind_fnt,   fnt_dump},
 215     {SIG_TLB,           get_kind_tlb,   tlb_dump},
 216     {SIG_NLS,           get_kind_nls,   nls_dump},
 217     {SIG_REG,           get_kind_reg,   reg_dump},
 218     {SIG_UNKNOWN,       NULL,           NULL} /* sentinel */
 219 };
 220
 221 BOOL dump_analysis(const char *name, file_dumper fn, enum FileSig wanted_sig)
 222 {
 223     BOOL                ret = TRUE;
 224     const struct dumper *dpr;
 225
 226     setbuf(stdout, NULL);
 227
 228     if (!(dump_base = read_file( name, &dump_total_len ))) fatal( "Cannot read file" );
 229
 230     printf("Contents of %s: %zu bytes\n\n", name, dump_total_len);
 231
 232     for (dpr = dumpers; dpr->kind != SIG_UNKNOWN; dpr++)
 233     {
 234         if (dpr->get_kind() == dpr->kind &&
 235             (wanted_sig == SIG_UNKNOWN || wanted_sig == dpr->kind))
 236         {
 237             if (fn) fn(); else dpr->dumper();
 238             break;
 239         }
 240     }
 241     if (dpr->kind == SIG_UNKNOWN)
 242     {
 243         printf("Can't get a suitable file signature, aborting\n");
 244         ret = FALSE;
 245     }
 246
 247     if (ret) printf("Done dumping %s\n", name);
 248     free( dump_base );
 249
 250     return ret;
 251 }
 252
 253 void    dump_file(const char* name)
 254 {
 255     dump_analysis(name, NULL, SIG_UNKNOWN);
 256 }