Method: Rex::PeParsey::PeBase#_load_relocations

Defined in:
lib/rex/peparsey/pebase.rb

#_load_relocationsObject



1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
# File 'lib/rex/peparsey/pebase.rb', line 1455

def _load_relocations

  #
  # Get the data directory entry, size, etc
  #
  exports_entry = _optional_header['DataDirectory'][5]
  rva           = exports_entry.v['VirtualAddress']
  size          = exports_entry.v['Size']

  return nil if size == 0

  #
  # Ok, so we have the data directory, now lets parse it
  #

  dirdata = _isource.read(rva_to_file_offset(rva), size)

  relocdirs = [ ]

  while dirdata.length >= IMAGE_SIZEOF_BASE_RELOCATION
    header = IMAGE_BASE_RELOCATION.make_struct
    header.from_s(dirdata)
    dirdata = header.leftover

    numrelocs = (header.v['SizeOfBlock'] - IMAGE_SIZEOF_BASE_RELOCATION) / 2

    relocbase = header.v['VirtualAddress']

    relocdir = RelocationDirectory.new(relocbase, [ ])

    numrelocs.times do
      reloc = IMAGE_BASE_RELOCATION_TYPE_OFFSET.make_struct
      reloc.from_s(dirdata)
      dirdata = reloc.leftover

      typeoffset = reloc.v['TypeOffset']

      relocrva  = relocbase + (typeoffset & 0xfff)
      reloctype = (typeoffset >> 12) & 0xf

      relocdir.entries << RelocationEntry.new(relocrva, reloctype)
    end

    relocdirs << relocdir
  end

  return relocdirs
end