dnfile 0.3.0

.NET binary extractor
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135

use crate::{Result, error::Error};

pub mod blob_heap;
pub mod generic_stream;
pub mod guid_heap;
pub mod meta_data_tables;
pub mod string_heap;
pub mod user_string_heap;

#[derive(Debug, Clone, serde::Serialize)]
pub enum Stream {
    GenericStream(generic_stream::GenericStream),
    MetaDataTables(meta_data_tables::MetaDataTable),
    StringHeap(string_heap::StringHeap),
    BlobHeap(blob_heap::BlobHeap),
    GuidHeap(guid_heap::GuidHeap),
    UserStringHeap(user_string_heap::UserStringHeap),
}

#[derive(Debug, Clone, serde::Serialize)]
pub struct ClrStream {
    pub name: String,
    pub rva: u32,
    pub size: usize,
    pub stream_table_entry_size: usize,
    pub stream: Stream,
}

impl ClrStream {
    pub fn name(&self) -> &str {
        &self.name
    }

    pub fn get_string(&self, index: &[u8]) -> Result<String> {
        if let Stream::StringHeap(s) = &self.stream {
            let index = crate::utils::read_usize(index)?;
            s.get(index)
        } else {
            Err(Error::TryReadStringFromNotStringHeap)
        }
    }

    pub fn get_blob(&self, index: &[u8]) -> Result<Vec<u8>> {
        if let Stream::BlobHeap(s) = &self.stream {
            let index = crate::utils::read_usize(index)?;
            s.get(index)
        } else {
            Err(Error::TryReadStringFromNotStringHeap)
        }
    }

    pub fn get_guid(&self, index: &[u8]) -> Result<uuid::Uuid> {
        if let Stream::GuidHeap(s) = &self.stream {
            let index = crate::utils::read_usize(index)?;
            s.get(index)
        } else {
            Err(Error::TryReadGuidFromNotGuidHeap)
        }
    }
}

impl crate::DnPe {
    pub fn nnew_clr_stream(
        &self,
        metadata_rva: &u32,
        stream_offset: &u32,
        stream_size: &usize,
        stream_name: &str,
        stream_data: Vec<u8>,
    ) -> Result<ClrStream> {
        Ok(ClrStream {
            name: stream_name.to_string(),
            rva: metadata_rva + stream_offset,
            size: stream_data.len(),
            stream_table_entry_size: stream_name.len() + (4 - stream_name.len() % 4) + 8,
            stream: match stream_name {
                "#~" | "#-" => self.new_meta_data_table(
                    metadata_rva,
                    stream_offset,
                    stream_size,
                    stream_name,
                    stream_data,
                )?,
                "#Strings" => self.new_string_heap(
                    metadata_rva,
                    stream_offset,
                    stream_size,
                    stream_name,
                    stream_data,
                )?,
                "#GUID" => self.new_guid_heap(
                    metadata_rva,
                    stream_offset,
                    stream_size,
                    stream_name,
                    stream_data,
                )?,
                "#Blob" => self.new_blob_heap(
                    metadata_rva,
                    stream_offset,
                    stream_size,
                    stream_name,
                    stream_data,
                )?,
                "#US" => self.new_user_string_heap(
                    metadata_rva,
                    stream_offset,
                    stream_size,
                    stream_name,
                    stream_data,
                )?,
                "_" => self.new_generic_stream(
                    metadata_rva,
                    stream_offset,
                    stream_size,
                    stream_name,
                    stream_data,
                )?,
                _ => return Err(Error::UndefinedStream),
            },
        })
    }

    pub fn parse_clr_stream(
        &self,
        stream: &ClrStream,
        stream_map: &std::collections::HashMap<String, ClrStream>,
    ) -> Result<ClrStream> {
        let mut res = stream.clone();
        if let Stream::MetaDataTables(m) = &mut res.stream {
            m.tables = self.parse_meta_data_tables(m, stream_map)?;
        }
        Ok(res)
    }
}