forked from WithSecureOpenSource/Sulo
-
Notifications
You must be signed in to change notification settings - Fork 0
/
FlashPlayerConfigBuilder.cpp
438 lines (414 loc) · 27 KB
/
FlashPlayerConfigBuilder.cpp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
/*
Copyright 2014 F-Secure
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
#include "FlashPlayerConfigBuilder.h"
FlashPlayerConfigBuilder::FlashPlayerConfigBuilder(void)
{
m_supportedConfigs["10.3.181.23_win_sa_debug"].versionStr = "WIN 10,3,181,22";
m_supportedConfigs["10.3.181.23_win_sa_debug"].versionStrRVA = 0x453f74;
m_supportedConfigs["10.3.181.23_win_sa_debug"].setInterpRVA = 0x3F2A46;
m_supportedConfigs["10.3.181.23_win_sa_debug"].verifyOnCallRVA = 0x3F3131;
m_supportedConfigs["10.3.181.23_win_sa_debug"].byteArrayVTableRVA = 0x55d698;
m_supportedConfigs["10.3.181.23_win_sa_debug"].bufferOffsetInByteArray = 0x10;
m_supportedConfigs["10.3.181.23_win_sa_debug"].dataOffsetInByteArrayBuffer = 0x24;
m_supportedConfigs["10.3.181.23_win_sa_debug"].countOffsetInByteArrayBuffer = 0x2c;
m_supportedConfigs["10.3.181.23_win_sa_debug"].stringVTableRVA = 0x55d4f8;
m_supportedConfigs["10.3.181.23_win_sa_debug"].stringLengthOffset = 0x10;
m_supportedConfigs["10.3.181.23_win_sa_debug"].stringBufferOffset = 0x8;
m_supportedConfigs["10.3.181.23_win_sa_debug"].methodInfoOffsetInMethodEnv = 0x4;
m_supportedConfigs["10.3.181.23_win_sa_debug"].invokerOffsetInMethodInfo = 0x4;
m_supportedConfigs["10.3.181.23_win_sa_debug"].traitsOffsetInMethodInfo = 0xc;
m_supportedConfigs["10.3.181.23_win_sa_debug"].poolOffsetInMethodInfo = 0x14;
m_supportedConfigs["10.3.181.23_win_sa_debug"].abcInfoPosOffsetInMethodInfo = 0x18;
m_supportedConfigs["10.3.181.23_win_sa_debug"].methodIdOffsetInMethodInfo = 0x1c;
m_supportedConfigs["10.3.181.23_win_sa_debug"].flagsOffsetInMethodInfo = 0x34;
m_supportedConfigs["10.3.181.23_win_sa_debug"].initOffsetInTraits = 0x48;
m_supportedConfigs["10.3.181.23_win_sa_debug"].traitsPosOffsetOffsetInTraits = 0x50;
m_supportedConfigs["10.3.181.23_win_sa_debug"].posTypeOffsetInTraits = 0x79;
m_supportedConfigs["10.3.181.23_win_sa_debug"].namespaceOffsetInTraits = 0x3c;
m_supportedConfigs["10.3.181.23_win_sa_debug"].nameOffsetInTraits = 0x40;
m_supportedConfigs["10.3.181.23_win_sa_debug"].methodsOffsetInPoolObject = 0x8c;
m_supportedConfigs["10.3.181.23_win_sa_debug"].methodNameIndicesOffsetInPoolObject = 0x90;
m_supportedConfigs["10.3.181.23_win_sa_debug"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["10.3.181.23_win_sa_debug"].uriOffsetInNamespace = 0x10;
m_supportedConfigs["10.3.181.23_win_sa_debug"].namespacesOffsetInNamespaceSet = 0x4;
m_supportedConfigs["10.3.181.23_win_sa_debug"].multinameSize = 0x10;
m_supportedConfigs["10.3.181.23_win_sa_debug"].precompNamesHeaderSize = 0x8;
m_supportedConfigs["10.3.181.23_win_sa_debug"].debugBuild = true;
m_supportedConfigs["10.3.181.23_win_sa_debug"].m_flash_version= VER_10;
m_supportedConfigs["10.3.181.23_win_sa_debug"].byteArrayOffsetInByteArrayObject= 0; // NOTE: Only valid in version 15
m_supportedConfigs["10.3.181.23_win_sa_debug"].traitsOffsetInScope = 0x8;
m_supportedConfigs["10.3.181.23_win_sa"].versionStr = "WIN 10,3,181,22";
m_supportedConfigs["10.3.181.23_win_sa"].versionStrRVA = 0x42a528;
m_supportedConfigs["10.3.181.23_win_sa"].setInterpRVA = 0x3D3646;
m_supportedConfigs["10.3.181.23_win_sa"].verifyOnCallRVA = 0x3d3c8a;
m_supportedConfigs["10.3.181.23_win_sa"].byteArrayVTableRVA = 0x4D73B0;
m_supportedConfigs["10.3.181.23_win_sa"].bufferOffsetInByteArray = 0x10;
m_supportedConfigs["10.3.181.23_win_sa"].dataOffsetInByteArrayBuffer = 0x24;
m_supportedConfigs["10.3.181.23_win_sa"].countOffsetInByteArrayBuffer = 0x2c;
m_supportedConfigs["10.3.181.23_win_sa"].stringVTableRVA = 0x4d72d0;
m_supportedConfigs["10.3.181.23_win_sa"].stringLengthOffset = 0x10;
m_supportedConfigs["10.3.181.23_win_sa"].stringBufferOffset = 0x8;
m_supportedConfigs["10.3.181.23_win_sa"].methodInfoOffsetInMethodEnv = 0x4;
m_supportedConfigs["10.3.181.23_win_sa"].invokerOffsetInMethodInfo = 0x4;
m_supportedConfigs["10.3.181.23_win_sa"].traitsOffsetInScope = 0x8;
m_supportedConfigs["10.3.181.23_win_sa"].traitsOffsetInMethodInfo = 0xc;
m_supportedConfigs["10.3.181.23_win_sa"].poolOffsetInMethodInfo = 0x14;
m_supportedConfigs["10.3.181.23_win_sa"].abcInfoPosOffsetInMethodInfo = 0x18;
m_supportedConfigs["10.3.181.23_win_sa"].methodIdOffsetInMethodInfo = 0x1c;
m_supportedConfigs["10.3.181.23_win_sa"].flagsOffsetInMethodInfo = 0x30;
m_supportedConfigs["10.3.181.23_win_sa"].initOffsetInTraits = 0x48;
m_supportedConfigs["10.3.181.23_win_sa"].traitsPosOffsetOffsetInTraits = 0x50;
m_supportedConfigs["10.3.181.23_win_sa"].posTypeOffsetInTraits = 0x79;
m_supportedConfigs["10.3.181.23_win_sa"].namespaceOffsetInTraits = 0x3c;
m_supportedConfigs["10.3.181.23_win_sa"].nameOffsetInTraits = 0x40;
m_supportedConfigs["10.3.181.23_win_sa"].methodsOffsetInPoolObject = 0x88;
m_supportedConfigs["10.3.181.23_win_sa"].methodNameIndicesOffsetInPoolObject = NULL;
m_supportedConfigs["10.3.181.23_win_sa"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["10.3.181.23_win_sa"].uriOffsetInNamespace = 0x10;
m_supportedConfigs["10.3.181.23_win_sa"].namespacesOffsetInNamespaceSet = 0x4;
m_supportedConfigs["10.3.181.23_win_sa"].multinameSize = 0x10;
m_supportedConfigs["10.3.181.23_win_sa"].precompNamesHeaderSize = 0x8;
m_supportedConfigs["10.3.181.23_win_sa"].debugBuild = false;
m_supportedConfigs["10.3.181.23_win_sa"].m_flash_version= VER_10;
m_supportedConfigs["10.3.181.23_win_sa"].byteArrayOffsetInByteArrayObject= 0; // NOTE: Only valid in version 15
m_supportedConfigs["10.3.181.23_winax"].versionStr = "WIN 10,3,181,23";
m_supportedConfigs["10.3.181.23_winax"].versionStrRVA = 0x4CC970;
m_supportedConfigs["10.3.181.23_winax"].setInterpRVA = 0x406766;
m_supportedConfigs["10.3.181.23_winax"].verifyOnCallRVA = 0x406DAA;
m_supportedConfigs["10.3.181.23_winax"].byteArrayVTableRVA = 0x57D038;
m_supportedConfigs["10.3.181.23_winax"].bufferOffsetInByteArray = 0x10;
m_supportedConfigs["10.3.181.23_winax"].dataOffsetInByteArrayBuffer = 0x24;
m_supportedConfigs["10.3.181.23_winax"].countOffsetInByteArrayBuffer = 0x2c;
m_supportedConfigs["10.3.181.23_winax"].stringVTableRVA = 0x57CF60;
m_supportedConfigs["10.3.181.23_winax"].stringLengthOffset = 0x10;
m_supportedConfigs["10.3.181.23_winax"].stringBufferOffset = 0x8;
m_supportedConfigs["10.3.181.23_winax"].methodInfoOffsetInMethodEnv = 0x4;
m_supportedConfigs["10.3.181.23_winax"].invokerOffsetInMethodInfo = 0x4;
m_supportedConfigs["10.3.181.23_winax"].traitsOffsetInMethodInfo = 0xc;
m_supportedConfigs["10.3.181.23_winax"].traitsOffsetInScope = 0x8;
m_supportedConfigs["10.3.181.23_winax"].poolOffsetInMethodInfo = 0x14;
m_supportedConfigs["10.3.181.23_winax"].abcInfoPosOffsetInMethodInfo = 0x18;
m_supportedConfigs["10.3.181.23_winax"].methodIdOffsetInMethodInfo = 0x1c;
m_supportedConfigs["10.3.181.23_winax"].flagsOffsetInMethodInfo = 0x30;
m_supportedConfigs["10.3.181.23_winax"].initOffsetInTraits = 0x48;
m_supportedConfigs["10.3.181.23_winax"].traitsPosOffsetOffsetInTraits = 0x50;
m_supportedConfigs["10.3.181.23_winax"].posTypeOffsetInTraits = 0x79;
m_supportedConfigs["10.3.181.23_winax"].namespaceOffsetInTraits = 0x3c;
m_supportedConfigs["10.3.181.23_winax"].nameOffsetInTraits = 0x40;
m_supportedConfigs["10.3.181.23_winax"].methodsOffsetInPoolObject = 0x88;
m_supportedConfigs["10.3.181.23_winax"].methodNameIndicesOffsetInPoolObject = NULL;
m_supportedConfigs["10.3.181.23_winax"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["10.3.181.23_winax"].uriOffsetInNamespace = 0x10;
m_supportedConfigs["10.3.181.23_winax"].namespacesOffsetInNamespaceSet = 0x4;
m_supportedConfigs["10.3.181.23_winax"].multinameSize = 0x10;
m_supportedConfigs["10.3.181.23_winax"].precompNamesHeaderSize = 0x8;
m_supportedConfigs["10.3.181.23_winax"].debugBuild = false;
m_supportedConfigs["10.3.181.23_winax"].m_flash_version= VER_10;
m_supportedConfigs["10.3.181.23_winax"].byteArrayOffsetInByteArrayObject= 0; // NOTE: Only valid in version 15
m_supportedConfigs["11.1.102.62_win_sa"].versionStr = "WIN 11,1,102,62";
m_supportedConfigs["11.1.102.62_win_sa"].versionStrRVA = 0x5E42AC;
m_supportedConfigs["11.1.102.62_win_sa"].setInterpRVA = 0x48B9E7;
m_supportedConfigs["11.1.102.62_win_sa"].verifyOnCallRVA = 0x48C02D;
m_supportedConfigs["11.1.102.62_win_sa"].byteArrayVTableRVA = 0x6AAFF8;
m_supportedConfigs["11.1.102.62_win_sa"].bufferOffsetInByteArray = 0x10;
m_supportedConfigs["11.1.102.62_win_sa"].dataOffsetInByteArrayBuffer = 0x20;
m_supportedConfigs["11.1.102.62_win_sa"].countOffsetInByteArrayBuffer = 0x28;
m_supportedConfigs["11.1.102.62_win_sa"].stringVTableRVA = 0x6AAFBC;
m_supportedConfigs["11.1.102.62_win_sa"].stringLengthOffset = 0x10;
m_supportedConfigs["11.1.102.62_win_sa"].stringBufferOffset = 0x8;
m_supportedConfigs["11.1.102.62_win_sa"].methodInfoOffsetInMethodEnv = 0x8;
m_supportedConfigs["11.1.102.62_win_sa"].invokerOffsetInMethodInfo = 0x8;
m_supportedConfigs["11.1.102.62_win_sa"].traitsOffsetInMethodInfo = 0x10;
m_supportedConfigs["11.1.102.62_win_sa"].poolOffsetInMethodInfo = 0x18;
m_supportedConfigs["11.1.102.62_win_sa"].abcInfoPosOffsetInMethodInfo = 0x1c;
m_supportedConfigs["11.1.102.62_win_sa"].methodIdOffsetInMethodInfo = 0x20;
m_supportedConfigs["11.1.102.62_win_sa"].traitsOffsetInScope = 0xc;
m_supportedConfigs["11.1.102.62_win_sa"].flagsOffsetInMethodInfo = 0x34;
m_supportedConfigs["11.1.102.62_win_sa"].initOffsetInTraits = 0x4c;
m_supportedConfigs["11.1.102.62_win_sa"].traitsPosOffsetOffsetInTraits = 0x54;
m_supportedConfigs["11.1.102.62_win_sa"].posTypeOffsetInTraits = 0x7d;
m_supportedConfigs["11.1.102.62_win_sa"].namespaceOffsetInTraits = 0x40;
m_supportedConfigs["11.1.102.62_win_sa"].nameOffsetInTraits = 0x44;
m_supportedConfigs["11.1.102.62_win_sa"].methodsOffsetInPoolObject = 0x88;
m_supportedConfigs["11.1.102.62_win_sa"].methodNameIndicesOffsetInPoolObject = NULL;
m_supportedConfigs["11.1.102.62_win_sa"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["11.1.102.62_win_sa"].uriOffsetInNamespace = 0xc;
m_supportedConfigs["11.1.102.62_win_sa"].namespacesOffsetInNamespaceSet = 0x8;
m_supportedConfigs["11.1.102.62_win_sa"].multinameSize = 0x10;
m_supportedConfigs["11.1.102.62_win_sa"].precompNamesHeaderSize = 0xc;
m_supportedConfigs["11.1.102.62_win_sa"].debugBuild = false;
m_supportedConfigs["11.1.102.62_win_sa"].m_flash_version= VER_11;
m_supportedConfigs["11.1.102.62_win_sa"].byteArrayOffsetInByteArrayObject= 0; // NOTE: Only valid in version 15
m_supportedConfigs["11.1.102.62_winax"].versionStr = "WIN 11,1,102,62";
m_supportedConfigs["11.1.102.62_winax"].versionStrRVA = 0x68443C;
m_supportedConfigs["11.1.102.62_winax"].setInterpRVA = 0x4BFD87;
m_supportedConfigs["11.1.102.62_winax"].verifyOnCallRVA = 0x4C03CD;
m_supportedConfigs["11.1.102.62_winax"].byteArrayVTableRVA = 0x7471E8;
m_supportedConfigs["11.1.102.62_winax"].bufferOffsetInByteArray = 0x10;
m_supportedConfigs["11.1.102.62_winax"].dataOffsetInByteArrayBuffer = 0x20;
m_supportedConfigs["11.1.102.62_winax"].countOffsetInByteArrayBuffer = 0x28;
m_supportedConfigs["11.1.102.62_winax"].stringVTableRVA = 0x74711C;
m_supportedConfigs["11.1.102.62_winax"].stringLengthOffset = 0x10;
m_supportedConfigs["11.1.102.62_winax"].stringBufferOffset = 0x8;
m_supportedConfigs["11.1.102.62_winax"].methodInfoOffsetInMethodEnv = 0x8;
m_supportedConfigs["11.1.102.62_winax"].invokerOffsetInMethodInfo = 0x8;
m_supportedConfigs["11.1.102.62_winax"].traitsOffsetInMethodInfo = 0x10;
m_supportedConfigs["11.1.102.62_winax"].traitsOffsetInScope = 0xc;
m_supportedConfigs["11.1.102.62_winax"].poolOffsetInMethodInfo = 0x18;
m_supportedConfigs["11.1.102.62_winax"].abcInfoPosOffsetInMethodInfo = 0x1c;
m_supportedConfigs["11.1.102.62_winax"].methodIdOffsetInMethodInfo = 0x20;
m_supportedConfigs["11.1.102.62_winax"].flagsOffsetInMethodInfo = 0x34;
m_supportedConfigs["11.1.102.62_winax"].initOffsetInTraits = 0x4c;
m_supportedConfigs["11.1.102.62_winax"].traitsPosOffsetOffsetInTraits = 0x54;
m_supportedConfigs["11.1.102.62_winax"].posTypeOffsetInTraits = 0x7d;
m_supportedConfigs["11.1.102.62_winax"].namespaceOffsetInTraits = 0x40;
m_supportedConfigs["11.1.102.62_winax"].nameOffsetInTraits = 0x44;
m_supportedConfigs["11.1.102.62_winax"].methodsOffsetInPoolObject = 0x88;
m_supportedConfigs["11.1.102.62_winax"].methodNameIndicesOffsetInPoolObject = NULL;
m_supportedConfigs["11.1.102.62_winax"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["11.1.102.62_winax"].uriOffsetInNamespace = 0xc;
m_supportedConfigs["11.1.102.62_winax"].namespacesOffsetInNamespaceSet = 0x8;
m_supportedConfigs["11.1.102.62_winax"].multinameSize = 0x10;
m_supportedConfigs["11.1.102.62_winax"].precompNamesHeaderSize = 0xc;
m_supportedConfigs["11.1.102.62_winax"].debugBuild = false;
m_supportedConfigs["11.1.102.62_winax"].m_flash_version= VER_11;
m_supportedConfigs["11.1.102.62_winax"].byteArrayOffsetInByteArrayObject= 0; // NOTE: Only valid in version 15
// ================= 11.3.300.257 ======================================
m_supportedConfigs["11.3.300.257_winax"].versionStr = "WIN 11,3,300,257";
m_supportedConfigs["11.3.300.257_winax"].versionStrRVA = 0x70FAC8;
m_supportedConfigs["11.3.300.257_winax"].setInterpRVA = 0x53A987;
m_supportedConfigs["11.3.300.257_winax"].verifyOnCallRVA = 0x53AFDD;
m_supportedConfigs["11.3.300.257_winax"].byteArrayVTableRVA = 0x7DA510;
m_supportedConfigs["11.3.300.257_winax"].bufferOffsetInByteArray = 0x10;
m_supportedConfigs["11.3.300.257_winax"].dataOffsetInByteArrayBuffer = 0x20;
m_supportedConfigs["11.3.300.257_winax"].countOffsetInByteArrayBuffer = 0x28;
m_supportedConfigs["11.3.300.257_winax"].stringVTableRVA = 0x7DA4D4;
m_supportedConfigs["11.3.300.257_winax"].stringBufferOffset = 0x8;
m_supportedConfigs["11.3.300.257_winax"].stringLengthOffset = 0x10;
m_supportedConfigs["11.3.300.257_winax"].methodInfoOffsetInMethodEnv = 0x8;
m_supportedConfigs["11.3.300.257_winax"].invokerOffsetInMethodInfo = 0x8;
m_supportedConfigs["11.3.300.257_winax"].traitsOffsetInMethodInfo = 0x10;
m_supportedConfigs["11.3.300.257_winax"].traitsOffsetInScope = 0xC;
m_supportedConfigs["11.3.300.257_winax"].poolOffsetInMethodInfo = 0x18;
m_supportedConfigs["11.3.300.257_winax"].abcInfoPosOffsetInMethodInfo = 0x1c;
m_supportedConfigs["11.3.300.257_winax"].methodIdOffsetInMethodInfo = 0x20;
m_supportedConfigs["11.3.300.257_winax"].flagsOffsetInMethodInfo = 0x34;
m_supportedConfigs["11.3.300.257_winax"].initOffsetInTraits = 0x50;
m_supportedConfigs["11.3.300.257_winax"].traitsPosOffsetOffsetInTraits = 0x58;
m_supportedConfigs["11.3.300.257_winax"].posTypeOffsetInTraits = 0x81;
m_supportedConfigs["11.3.300.257_winax"].namespacesOffsetInNamespaceSet = 0x8;
m_supportedConfigs["11.3.300.257_winax"].nameOffsetInTraits = 0x48;
m_supportedConfigs["11.3.300.257_winax"].methodsOffsetInPoolObject = 0x88;
m_supportedConfigs["11.3.300.257_winax"].methodNameIndicesOffsetInPoolObject = NULL;
m_supportedConfigs["11.3.300.257_winax"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["11.3.300.257_winax"].uriOffsetInNamespace = 0xc;
m_supportedConfigs["11.3.300.257_winax"].namespaceOffsetInTraits = 0x44;
m_supportedConfigs["11.3.300.257_winax"].multinameSize = 0x10;
m_supportedConfigs["11.3.300.257_winax"].precompNamesHeaderSize = 0x0c;
m_supportedConfigs["11.3.300.257_winax"].debugBuild = false;
m_supportedConfigs["11.3.300.257_winax"].m_flash_version= VER_11;
m_supportedConfigs["11.3.300.257_winax"].byteArrayOffsetInByteArrayObject= 0; // FIXME: Only valid in version 15
// ================= end of 11.3.300.257 ======================================
// ================= start of 15_0_0_152 ======================================
m_supportedConfigs["15.0.0.152_winax"].versionStr = "WIN 15,0,0,152";
m_supportedConfigs["15.0.0.152_winax"].versionStrRVA = 0xB9B794;
m_supportedConfigs["15.0.0.152_winax"].setInterpRVA = 0x6AB447;
m_supportedConfigs["15.0.0.152_winax"].verifyOnCallRVA = 0x6AAE91;
m_supportedConfigs["15.0.0.152_winax"].byteArrayVTableRVA = 0xC85E08;
m_supportedConfigs["15.0.0.152_winax"].stringVTableRVA = 0xC85C68;
m_supportedConfigs["15.0.0.152_winax"].debugBuild = false;
m_supportedConfigs["15.0.0.152_winax"].m_flash_version= VER_15;
m_supportedConfigs["15.0.0.152_winax"].methodInfoOffsetInMethodEnv = 0x8;
m_supportedConfigs["15.0.0.152_winax"].traitsOffsetInMethodInfo = 0x10;
m_supportedConfigs["15.0.0.152_winax"].traitsOffsetInScope = 0xC;
m_supportedConfigs["15.0.0.152_winax"].invokerOffsetInMethodInfo = 0x8;
m_supportedConfigs["15.0.0.152_winax"].abcInfoPosOffsetInMethodInfo = 0x1c;
m_supportedConfigs["15.0.0.152_winax"].flagsOffsetInMethodInfo = 0x30;
m_supportedConfigs["15.0.0.152_winax"].poolOffsetInMethodInfo = 0x18;
m_supportedConfigs["15.0.0.152_winax"].methodIdOffsetInMethodInfo = 0x20;
m_supportedConfigs["15.0.0.152_winax"].posTypeOffsetInTraits = 0x81;
m_supportedConfigs["15.0.0.152_winax"].initOffsetInTraits = 0x50;
m_supportedConfigs["15.0.0.152_winax"].stringLengthOffset = 0x10;
m_supportedConfigs["15.0.0.152_winax"].stringBufferOffset = 0x8;
// In Adobe 15.x.x.x ByteArray memory layout is different from version 11.
m_supportedConfigs["15.0.0.152_winax"].byteArrayOffsetInByteArrayObject= 0x10;
m_supportedConfigs["15.0.0.152_winax"].bufferOffsetInByteArray = 0x28;
m_supportedConfigs["15.0.0.152_winax"].dataOffsetInByteArrayBuffer = 0x8;
m_supportedConfigs["15.0.0.152_winax"].countOffsetInByteArrayBuffer = 0x10;
m_supportedConfigs["15.0.0.152_winax"].traitsPosOffsetOffsetInTraits = 0x58;
m_supportedConfigs["15.0.0.152_winax"].namespaceOffsetInTraits = 0x44;
m_supportedConfigs["15.0.0.152_winax"].nameOffsetInTraits = 0x48;
m_supportedConfigs["15.0.0.152_winax"].uriOffsetInNamespace = 0xc;
m_supportedConfigs["15.0.0.152_winax"].methodsOffsetInPoolObject = 0x88;
m_supportedConfigs["15.0.0.152_winax"].methodNameIndicesOffsetInPoolObject = NULL;
m_supportedConfigs["15.0.0.152_winax"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["15.0.0.152_winax"].namespacesOffsetInNamespaceSet = 0x8;
m_supportedConfigs["15.0.0.152_winax"].multinameSize = 0x10;
m_supportedConfigs["15.0.0.152_winax"].precompNamesHeaderSize = 0x0c;
// ================= end of 15_0_0_152 ======================================
// ================= start of 15_0_0_223 ======================================
m_supportedConfigs["15.0.0.223_winax"].versionStr = "WIN 15,0,0,223";
m_supportedConfigs["15.0.0.223_winax"].versionStrRVA = 0xB9E7F4;
m_supportedConfigs["15.0.0.223_winax"].setInterpRVA = 0x6ADFA7;
m_supportedConfigs["15.0.0.223_winax"].verifyOnCallRVA = 0x6AD9F1;
m_supportedConfigs["15.0.0.223_winax"].byteArrayVTableRVA = 0xC89B98;
m_supportedConfigs["15.0.0.223_winax"].stringVTableRVA = 0xC89958;
m_supportedConfigs["15.0.0.223_winax"].m_flash_version= VER_15;
m_supportedConfigs["15.0.0.223_winax"].methodInfoOffsetInMethodEnv = 0x8;
m_supportedConfigs["15.0.0.223_winax"].traitsOffsetInMethodInfo = 0x10;
m_supportedConfigs["15.0.0.223_winax"].traitsOffsetInScope = 0xC;
m_supportedConfigs["15.0.0.223_winax"].invokerOffsetInMethodInfo = 0x8;
m_supportedConfigs["15.0.0.223_winax"].abcInfoPosOffsetInMethodInfo = 0x1c;
m_supportedConfigs["15.0.0.223_winax"].flagsOffsetInMethodInfo = 0x30;
m_supportedConfigs["15.0.0.223_winax"].poolOffsetInMethodInfo = 0x18;
m_supportedConfigs["15.0.0.223_winax"].methodIdOffsetInMethodInfo = 0x20;
m_supportedConfigs["15.0.0.223_winax"].posTypeOffsetInTraits = 0x81;
m_supportedConfigs["15.0.0.223_winax"].initOffsetInTraits = 0x50;
m_supportedConfigs["15.0.0.223_winax"].stringLengthOffset = 0x10;
m_supportedConfigs["15.0.0.223_winax"].stringBufferOffset = 0x8;
// In Adobe 15.x.x.x ByteArray memory layout is different from version 11.
m_supportedConfigs["15.0.0.223_winax"].byteArrayOffsetInByteArrayObject= 0x10;
m_supportedConfigs["15.0.0.223_winax"].bufferOffsetInByteArray = 0x28;
m_supportedConfigs["15.0.0.223_winax"].dataOffsetInByteArrayBuffer = 0x8;
m_supportedConfigs["15.0.0.223_winax"].countOffsetInByteArrayBuffer = 0x10;
m_supportedConfigs["15.0.0.223_winax"].traitsPosOffsetOffsetInTraits = 0x58;
m_supportedConfigs["15.0.0.223_winax"].namespaceOffsetInTraits = 0x44;
m_supportedConfigs["15.0.0.223_winax"].nameOffsetInTraits = 0x48;
m_supportedConfigs["15.0.0.223_winax"].uriOffsetInNamespace = 0xc;
m_supportedConfigs["15.0.0.223_winax"].methodsOffsetInPoolObject = 0x88;
m_supportedConfigs["15.0.0.223_winax"].methodNameIndicesOffsetInPoolObject = NULL;
m_supportedConfigs["15.0.0.223_winax"].precompNamesOffsetInPoolObject = 0x50;
m_supportedConfigs["15.0.0.223_winax"].namespacesOffsetInNamespaceSet = 0x8;
m_supportedConfigs["15.0.0.223_winax"].multinameSize = 0x10;
m_supportedConfigs["15.0.0.223_winax"].precompNamesHeaderSize = 0x0c;
m_supportedConfigs["15.0.0.223_winax"].debugBuild = false;
m_supportedConfigs["21.0.0.242_winax"].versionStr = "WIN 21,0,0,242";
m_supportedConfigs["21.0.0.242_winax"].versionStrRVA = 0xd36634;
m_supportedConfigs["21.0.0.242_winax"].setInterpRVA = 0x7d9a27;
m_supportedConfigs["21.0.0.242_winax"].verifyOnCallRVA = 0x7d9471;
m_supportedConfigs["21.0.0.242_winax"].byteArrayVTableRVA = 0xe4a900;
m_supportedConfigs["21.0.0.242_winax"].byteArrayOffsetInByteArrayObject = 0x18;
m_supportedConfigs["21.0.0.242_winax"].bufferOffsetInByteArray = 0x2C;
m_supportedConfigs["21.0.0.242_winax"].dataOffsetInByteArrayBuffer = 0x08;
m_supportedConfigs["21.0.0.242_winax"].countOffsetInByteArrayBuffer = 0x10;
m_supportedConfigs["21.0.0.242_winax"].stringVTableRVA = 0xe4b298;
m_supportedConfigs["21.0.0.242_winax"].stringLengthOffset = 0x10;
m_supportedConfigs["21.0.0.242_winax"].stringBufferOffset = 0x8;
m_supportedConfigs["21.0.0.242_winax"].m_flash_version = VER_15;
m_supportedConfigs["21.0.0.242_winax"].methodInfoOffsetInMethodEnv = 0x8;
m_supportedConfigs["21.0.0.242_winax"].traitsOffsetInMethodInfo = 0x10;
m_supportedConfigs["21.0.0.242_winax"].traitsOffsetInScope = 0xC;
m_supportedConfigs["21.0.0.242_winax"].invokerOffsetInMethodInfo = 0x8;
m_supportedConfigs["21.0.0.242_winax"].abcInfoPosOffsetInMethodInfo = 0x1c;
m_supportedConfigs["21.0.0.242_winax"].flagsOffsetInMethodInfo = 0x30;
m_supportedConfigs["21.0.0.242_winax"].poolOffsetInMethodInfo = 0x18;
m_supportedConfigs["21.0.0.242_winax"].methodIdOffsetInMethodInfo = 0x20;
m_supportedConfigs["21.0.0.242_winax"].posTypeOffsetInTraits = 0x81;
m_supportedConfigs["21.0.0.242_winax"].initOffsetInTraits = 0x50;
m_supportedConfigs["21.0.0.242_winax"].traitsPosOffsetOffsetInTraits = 0x58;
m_supportedConfigs["21.0.0.242_winax"].namespaceOffsetInTraits = 0x44;
m_supportedConfigs["21.0.0.242_winax"].nameOffsetInTraits = 0x48;
m_supportedConfigs["21.0.0.242_winax"].uriOffsetInNamespace = 0xC;
m_supportedConfigs["21.0.0.242_winax"].methodsOffsetInPoolObject = 0xC4;
m_supportedConfigs["21.0.0.242_winax"].methodNameIndicesOffsetInPoolObject = 0xD4;
m_supportedConfigs["21.0.0.242_winax"].precompNamesOffsetInPoolObject = 0x84;
m_supportedConfigs["21.0.0.242_winax"].namespacesOffsetInNamespaceSet = 0x8;
m_supportedConfigs["21.0.0.242_winax"].multinameSize = 0x10;
m_supportedConfigs["21.0.0.242_winax"].precompNamesHeaderSize = 0x0c;
m_supportedConfigs["21.0.0.242_winax"].debugBuild = false;
m_supportedConfigs["21.0.0.242_win_sa"].versionStr = "WIN 21,0,0,242";
m_supportedConfigs["21.0.0.242_win_sa"].versionStrRVA = 0x945700;
m_supportedConfigs["21.0.0.242_win_sa"].setInterpRVA = 0x73ea47;
m_supportedConfigs["21.0.0.242_win_sa"].verifyOnCallRVA = 0x73e491;
m_supportedConfigs["21.0.0.242_win_sa"].byteArrayVTableRVA = 0xa63410;
m_supportedConfigs["21.0.0.242_win_sa"].byteArrayOffsetInByteArrayObject = 0x18;
m_supportedConfigs["21.0.0.242_win_sa"].bufferOffsetInByteArray = 0x2C;
m_supportedConfigs["21.0.0.242_win_sa"].dataOffsetInByteArrayBuffer = 0x08;
m_supportedConfigs["21.0.0.242_win_sa"].countOffsetInByteArrayBuffer = 0x10;
m_supportedConfigs["21.0.0.242_win_sa"].stringVTableRVA = 0xa61a54;
m_supportedConfigs["21.0.0.242_win_sa"].stringLengthOffset = 0x10;
m_supportedConfigs["21.0.0.242_win_sa"].stringBufferOffset = 0x8;
m_supportedConfigs["21.0.0.242_win_sa"].m_flash_version = VER_15;
m_supportedConfigs["21.0.0.242_win_sa"].methodInfoOffsetInMethodEnv = 0x8;
m_supportedConfigs["21.0.0.242_win_sa"].traitsOffsetInMethodInfo = 0x10;
m_supportedConfigs["21.0.0.242_win_sa"].traitsOffsetInScope = 0xC;
m_supportedConfigs["21.0.0.242_win_sa"].invokerOffsetInMethodInfo = 0x8;
m_supportedConfigs["21.0.0.242_win_sa"].abcInfoPosOffsetInMethodInfo = 0x1c;
m_supportedConfigs["21.0.0.242_win_sa"].flagsOffsetInMethodInfo = 0x30;
m_supportedConfigs["21.0.0.242_win_sa"].poolOffsetInMethodInfo = 0x18;
m_supportedConfigs["21.0.0.242_win_sa"].methodIdOffsetInMethodInfo = 0x20;
m_supportedConfigs["21.0.0.242_win_sa"].posTypeOffsetInTraits = 0x81;
m_supportedConfigs["21.0.0.242_win_sa"].initOffsetInTraits = 0x50;
m_supportedConfigs["21.0.0.242_win_sa"].traitsPosOffsetOffsetInTraits = 0x58;
m_supportedConfigs["21.0.0.242_win_sa"].namespaceOffsetInTraits = 0x44;
m_supportedConfigs["21.0.0.242_win_sa"].nameOffsetInTraits = 0x48;
m_supportedConfigs["21.0.0.242_win_sa"].uriOffsetInNamespace = 0xC;
m_supportedConfigs["21.0.0.242_win_sa"].methodsOffsetInPoolObject = 0xC4;
m_supportedConfigs["21.0.0.242_win_sa"].methodNameIndicesOffsetInPoolObject = 0xD4;
m_supportedConfigs["21.0.0.242_win_sa"].precompNamesOffsetInPoolObject = 0x84;
m_supportedConfigs["21.0.0.242_win_sa"].namespacesOffsetInNamespaceSet = 0x8;
m_supportedConfigs["21.0.0.242_win_sa"].multinameSize = 0x10;
m_supportedConfigs["21.0.0.242_win_sa"].precompNamesHeaderSize = 0x0c;
m_supportedConfigs["21.0.0.242_win_sa"].debugBuild = false;
m_currentConfig = NULL;
}
bool FlashPlayerConfigBuilder::isSupportedFlashPlayer(IMG img)
{
UINT32 loadOffset = IMG_LoadOffset(img);
UINT32 rdataRVA = 0;
UINT32 rdataSize = 0;
// Find where the .rdata section is
bool rdataFound = false;
for (SEC sec = IMG_SecHead(img); SEC_Valid(sec); sec = SEC_Next(sec))
{
if (SEC_Name(sec) == ".rdata")
{
rdataRVA = SEC_Address(sec) - loadOffset;
rdataSize = SEC_Size(sec);
rdataFound = true;
break;
}
}
// If no .rdata, this is not Flash Player
if (!rdataFound)
{
return false;
}
for (map<string,Config>::iterator it = m_supportedConfigs.begin(); it != m_supportedConfigs.end(); ++it)
{
Config* fc = &it->second;
// Make sure the address is within .rdata
if ((fc->versionStrRVA + fc->versionStr.length() + 1) > (rdataRVA + rdataSize) || (fc->versionStrRVA < rdataRVA))
{
continue;
}
if (!Logger::IsBadReadPtr((const void*)(fc->versionStrRVA+loadOffset), fc->versionStr.length()+1))
{
if (strcmp(fc->versionStr.c_str(), (const char*)(fc->versionStrRVA+loadOffset)) == 0)
{
// Set load offset and IMG values now that we know those
fc->img = img;
fc->loadOffset = loadOffset;
fc->rdataRVA = rdataRVA;
fc->rdataSize = rdataSize;
m_currentConfig = fc;
return true;
}
}
}
return false;
}
Config* FlashPlayerConfigBuilder::getConfig(void)
{
return m_currentConfig;
}