236 lines
7.9 KiB
PowerShell
236 lines
7.9 KiB
PowerShell
<#
|
||
.SYNOPSIS
|
||
Open binary file via IDA HTTP API (bypass MCP schema issue)
|
||
.PARAMETER Path
|
||
Binary file path (required)
|
||
.PARAMETER SessionId
|
||
Session ID (optional, auto-generated)
|
||
.PARAMETER NoAutoAnalysis
|
||
Skip automatic analysis (faster open for large files)
|
||
.PARAMETER TimeoutSeconds
|
||
Open timeout in seconds, returns timeout instead of blocking forever
|
||
#>
|
||
|
||
param(
|
||
[Parameter(Mandatory=$true)]
|
||
[string]$Path,
|
||
[string]$SessionId = "",
|
||
[switch]$NoAutoAnalysis = $false,
|
||
[int]$TimeoutSeconds = 120
|
||
)
|
||
|
||
Set-StrictMode -Version Latest
|
||
$ErrorActionPreference = 'Stop'
|
||
|
||
if (-not [string]::IsNullOrWhiteSpace($env:IDADIR)) {
|
||
$env:IDADIR = $env:IDADIR
|
||
}
|
||
else {
|
||
# Fallback: check common IDA installation paths
|
||
$idaCandidates = @(
|
||
'C:\Program Files\IDA Pro',
|
||
'C:\IDA Pro',
|
||
'D:\IDA',
|
||
(Join-Path $env:USERPROFILE 'Tools\IDA')
|
||
)
|
||
$foundIda = $idaCandidates | Where-Object { Test-Path -LiteralPath $_ } | Select-Object -First 1
|
||
if ($foundIda) {
|
||
$env:IDADIR = $foundIda
|
||
} else {
|
||
Write-Error "ERR:IDADIR not set and IDA Pro not found at common paths. Set IDADIR environment variable to your IDA installation directory."
|
||
exit 1
|
||
}
|
||
}
|
||
$Port = 13337
|
||
$TempDir = Join-Path $env:TEMP 'reverse-skill'
|
||
if (-not (Test-Path -LiteralPath $TempDir)) {
|
||
New-Item -ItemType Directory -Path $TempDir -Force | Out-Null
|
||
}
|
||
$PollIntervalMs = 2000
|
||
$ProgressIntervalSeconds = 10
|
||
|
||
function Get-OpenReadySession {
|
||
param(
|
||
[string]$ExpectedSessionId,
|
||
[string]$ExpectedPath,
|
||
[int]$RequestPort
|
||
)
|
||
|
||
$listBody = '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"idalib_list","arguments":{}}}'
|
||
$listResult = Invoke-RestMethod "http://127.0.0.1:$RequestPort/mcp" -Method Post -Body $listBody `
|
||
-ContentType "application/json" -TimeoutSec 10 -ErrorAction Stop
|
||
|
||
$sessions = @($listResult.result.structuredContent.sessions)
|
||
foreach ($candidate in $sessions) {
|
||
if (-not $candidate) {
|
||
continue
|
||
}
|
||
|
||
$sameSession = $candidate.session_id -eq $ExpectedSessionId
|
||
$samePath = $candidate.input_path -eq $ExpectedPath
|
||
$sameFile = [System.IO.Path]::GetFileName($candidate.input_path) -eq [System.IO.Path]::GetFileName($ExpectedPath)
|
||
if (($sameSession -or $samePath -or $sameFile) -and $candidate.is_analyzing -eq $false) {
|
||
return $candidate
|
||
}
|
||
}
|
||
|
||
return $null
|
||
}
|
||
|
||
if (-not (Test-Path $Path)) {
|
||
Write-Output "ERR:file_not_found"
|
||
exit 1
|
||
}
|
||
|
||
if ($TimeoutSeconds -le 0) {
|
||
Write-Output "ERR:invalid_timeout"
|
||
exit 1
|
||
}
|
||
|
||
# 判断是否用了临时副本（避免递归复制）
|
||
$isTempCopy = $Path.StartsWith($TempDir, [StringComparison]::OrdinalIgnoreCase)
|
||
|
||
# System32 文件自动复制到 Temp
|
||
if (-not $isTempCopy -and $Path -match "C:\\Windows\\System32") {
|
||
$Filename = [System.IO.Path]::GetFileName($Path)
|
||
$TempPath = "$TempDir\$Filename"
|
||
Copy-Item $Path $TempPath -Force -ErrorAction SilentlyContinue
|
||
if ($?) {
|
||
$Path = $TempPath
|
||
$isTempCopy = $true
|
||
}
|
||
}
|
||
|
||
# 清理同名旧数据库文件（只在非 Temp 副本时尝试）
|
||
if (-not $isTempCopy) {
|
||
$dir = [System.IO.Path]::GetDirectoryName($Path)
|
||
$base = [System.IO.Path]::GetFileNameWithoutExtension($Path)
|
||
$oldExts = @(".id0", ".id1", ".id2", ".nam", ".til", ".i64")
|
||
$hasLocked = $false
|
||
foreach ($ext in $oldExts) {
|
||
$f = Join-Path $dir "$base$ext"
|
||
if (Test-Path $f) {
|
||
Remove-Item $f -Force -ErrorAction SilentlyContinue
|
||
if (Test-Path $f) { $hasLocked = $true }
|
||
}
|
||
}
|
||
# 旧数据库文件被锁，自动用 Temp 副本
|
||
if ($hasLocked) {
|
||
$guid = [System.Guid]::NewGuid().ToString("N").Substring(0, 8)
|
||
$newName = "$guid-$([System.IO.Path]::GetFileName($Path))"
|
||
$TempPath = "$TempDir\$newName"
|
||
Copy-Item $Path $TempPath -Force
|
||
$Path = $TempPath
|
||
$isTempCopy = $true
|
||
}
|
||
}
|
||
|
||
$autoAnalysis = if ($NoAutoAnalysis) { "false" } else { "true" }
|
||
$escapedPath = $Path -replace '\\', '\\'
|
||
|
||
# 始终使用明确的会话 ID，便于超时时轮询会话状态判断是否已成功打开
|
||
if (-not $SessionId) {
|
||
$SessionId = [System.Guid]::NewGuid().ToString("N").Substring(0, 8)
|
||
}
|
||
|
||
$body = @"
|
||
{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"idalib_open","arguments":{"input_path":"$escapedPath","run_auto_analysis":$autoAnalysis,"session_id":null}}}
|
||
"@
|
||
if ($SessionId) {
|
||
$body = @"
|
||
{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"idalib_open","arguments":{"input_path":"$escapedPath","run_auto_analysis":$autoAnalysis,"session_id":"$SessionId"}}}
|
||
"@
|
||
}
|
||
|
||
# 将打开请求放到后台，避免 HTTP 长时间不回包时阻塞整个脚本
|
||
$openJob = Start-Job -ScriptBlock {
|
||
param($RequestBody, $RequestPort)
|
||
try {
|
||
Invoke-RestMethod "http://127.0.0.1:$RequestPort/mcp" -Method Post -Body $RequestBody `
|
||
-ContentType "application/json" -ErrorAction Stop
|
||
} catch {
|
||
$_.Exception.Message
|
||
}
|
||
} -ArgumentList $body, $Port
|
||
|
||
$deadline = (Get-Date).AddSeconds($TimeoutSeconds)
|
||
$openCompleted = $false
|
||
$startTime = Get-Date
|
||
$lastProgressAt = $startTime.AddSeconds(-$ProgressIntervalSeconds)
|
||
|
||
try {
|
||
while ((Get-Date) -lt $deadline) {
|
||
if (Wait-Job -Job $openJob -Timeout 1) {
|
||
$openCompleted = $true
|
||
break
|
||
}
|
||
|
||
try {
|
||
$session = Get-OpenReadySession -ExpectedSessionId $SessionId -ExpectedPath $Path -RequestPort $Port
|
||
if ($session) {
|
||
$tag = if ($isTempCopy) { " (temp copy)" } else { "" }
|
||
Stop-Job -Job $openJob -ErrorAction SilentlyContinue
|
||
Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
|
||
Write-Output "OK:$($session.filename):$($session.session_id)$tag"
|
||
exit 0
|
||
}
|
||
} catch {}
|
||
|
||
$now = Get-Date
|
||
if (($now - $lastProgressAt).TotalSeconds -ge $ProgressIntervalSeconds) {
|
||
$elapsed = [math]::Floor(($now - $startTime).TotalSeconds)
|
||
Write-Output "INFO:opening:$elapsed/${TimeoutSeconds}s"
|
||
$lastProgressAt = $now
|
||
}
|
||
|
||
Start-Sleep -Milliseconds $PollIntervalMs
|
||
}
|
||
|
||
if (-not $openCompleted) {
|
||
Stop-Job -Job $openJob -ErrorAction SilentlyContinue
|
||
Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
|
||
|
||
try {
|
||
$session = Get-OpenReadySession -ExpectedSessionId $SessionId -ExpectedPath $Path -RequestPort $Port
|
||
if ($session) {
|
||
$tag = if ($isTempCopy) { " (temp copy)" } else { "" }
|
||
Write-Output "OK:$($session.filename):$($session.session_id)$tag"
|
||
exit 0
|
||
}
|
||
} catch {}
|
||
|
||
Write-Output "ERR:open_timeout_${TimeoutSeconds}s"
|
||
exit 1
|
||
}
|
||
|
||
$jobResult = Receive-Job -Job $openJob
|
||
Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
|
||
|
||
if ($jobResult -is [string]) {
|
||
Write-Output "ERR:$jobResult"
|
||
exit 1
|
||
}
|
||
|
||
if ($jobResult.result.structuredContent.success -eq $true) {
|
||
$session = $jobResult.result.structuredContent.session
|
||
$tag = if ($isTempCopy) { " (temp copy)" } else { "" }
|
||
Write-Output "OK:$($session.filename):$($session.session_id)$tag"
|
||
} else {
|
||
# 自动降级：非 Temp 副本失败时，复制到 Temp 重试
|
||
if (-not $isTempCopy) {
|
||
$guid = [System.Guid]::NewGuid().ToString("N").Substring(0, 8)
|
||
$newName = "$guid-$([System.IO.Path]::GetFileName($Path))"
|
||
$TempPath = "$TempDir\$newName"
|
||
Copy-Item $Path $TempPath -Force
|
||
& $PSCommandPath -Path $TempPath -SessionId $SessionId -NoAutoAnalysis:$NoAutoAnalysis -TimeoutSeconds $TimeoutSeconds
|
||
} else {
|
||
Write-Output "ERR:$($jobResult.result.structuredContent.error)"
|
||
}
|
||
}
|
||
} finally {
|
||
if ($openJob) {
|
||
Stop-Job -Job $openJob -ErrorAction SilentlyContinue
|
||
Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
|
||
}
|
||
}
|