mirror of
https://github.com/platomav/BIOSUtilities.git
synced 2025-05-09 13:52:00 -04:00

Added AMI PFAT nested detection at each file Added Award BIOS payload naming at each file Switched Panasonic BIOS LZNT1 external library Improved Panasonic LZNT1 detection and length Improved Dell PFS code structure and fixed bugs Improved code exception handling (raise, catch) Improved code definitions (PEP8, docs, types) Fixed some arguments missing from help screens
66 lines
2.1 KiB
Python
66 lines
2.1 KiB
Python
#!/usr/bin/env python3 -B
|
|
# coding=utf-8
|
|
|
|
"""
|
|
Copyright (C) 2022-2024 Plato Mavropoulos
|
|
"""
|
|
|
|
import pefile
|
|
|
|
from common.system import printer
|
|
from common.text_ops import file_to_bytes
|
|
|
|
|
|
def is_pe_file(in_file: str | bytes) -> bool:
|
|
""" Check if input is a PE file """
|
|
|
|
return bool(get_pe_file(in_file, silent=True))
|
|
|
|
|
|
def get_pe_file(in_file: str | bytes, padding: int = 0, fast: bool = True, silent: bool = False) -> pefile.PE | None:
|
|
""" Get pefile object from PE file """
|
|
|
|
in_buffer = file_to_bytes(in_file)
|
|
|
|
pe_file = None
|
|
|
|
try:
|
|
# Analyze detected MZ > PE image buffer
|
|
pe_file = pefile.PE(data=in_buffer, fast_load=fast)
|
|
except Exception as error: # pylint: disable=broad-except
|
|
if not silent:
|
|
_filename = in_file if type(in_file).__name__ == 'string' else 'buffer'
|
|
|
|
printer(f'Error: Could not get pefile object from {_filename}: {error}!', padding)
|
|
|
|
return pe_file
|
|
|
|
|
|
def get_pe_info(pe_file: pefile.PE, padding: int = 0, silent: bool = False) -> dict:
|
|
""" Get PE info from pefile object """
|
|
|
|
pe_info = {}
|
|
|
|
try:
|
|
# When fast_load is used, IMAGE_DIRECTORY_ENTRY_RESOURCE must be parsed prior to FileInfo > StringTable
|
|
pe_file.parse_data_directories(directories=[pefile.DIRECTORY_ENTRY['IMAGE_DIRECTORY_ENTRY_RESOURCE']])
|
|
|
|
# Retrieve MZ > PE > FileInfo > StringTable information
|
|
pe_info = pe_file.FileInfo[0][0].StringTable[0].entries
|
|
except Exception as error: # pylint: disable=broad-except
|
|
if not silent:
|
|
printer(f'Error: Could not get PE info from pefile object: {error}!', padding)
|
|
|
|
return pe_info
|
|
|
|
|
|
def show_pe_info(pe_info: dict, padding: int = 0) -> None:
|
|
""" Print PE info from pefile StringTable """
|
|
|
|
if isinstance(pe_info, dict):
|
|
for title, value in pe_info.items():
|
|
info_title = title.decode('utf-8', 'ignore').strip()
|
|
info_value = value.decode('utf-8', 'ignore').strip()
|
|
|
|
if info_title and info_value:
|
|
printer(f'{info_title}: {info_value}', padding, new_line=False)
|