How to import External Libraries correctly

[CookedMelon]

After using -loader-loadLibraries to load libraries, I can get the Address of external function in library file.

        ExternalLocation externalLocation = this.thunk_function.getThunkedFunction(true).getExternalLocation();
        String libpath = currentProgram.getExternalManager().getExternalLibrary(externalLocation.getLibraryName())
                .getAssociatedProgramPath();
        println("libpath is " + libpath); // 这里就可以知道需要import哪个库文件
        ProjectData proj_data = state.getProject().getProjectData();
        
        if(libpath == null) {
            println("can't get external library");
            return false;
        }
        DomainFile libFile = proj_data.getFile(libpath);
        println("libFile is " + libFile);
        
        Program externalProgram = null;

However, when I tried to get the content of Function, I find the functions has no Body, their MinAddress equals to MaxAddress

Program externalProgram = null;
externalProgram = (Program) libFile.getImmutableDomainObject(libFile, DomainFile.DEFAULT_VERSION, monitor);

        Listing listing = externalProgram.getListing();
        FunctionIterator func_iter = listing.getFunctions(true);
        while(func_iter.hasNext()) {
            Function targetFunc = func_iter.next();
            AddressSetView funcBody = targetFunc.getBody();
            long min_addr = funcBody.getMinAddress().getOffset();
            long max_addr = funcBody.getMaxAddress().getOffset();
            println(String.format("get new Program Function %s: 0x%x --> 0x%x", targetFunc.getName(), min_addr,
                    max_addr));
        }

I wonder how to get the right Program.

[ryanmkurtz]

If you look at the external progarm's function in the GUI, how do the start and end addresses match up to to what you are seeing in your output?

[CookedMelon]

In GUI, the offset is 0x10000

[CookedMelon]

By the way, using -loader-loadLibraries let the functions be loaded with an offset of 0x400000.

get new Program Function checkNIPCAHashCode: 0x40ab3c --> 0x40ab3c
get new Program Function check_new_nipca_auth: 0x40b2f4 --> 0x40b2f4
get new Program Function readText: 0x40b6f8 --> 0x40b6f8
get new Program Function printTextLine: 0x40b734 --> 0x40b734
get new Program Function getValBuf: 0x40b7f8 --> 0x40b7f8

When I first import the lib file to project, then using -loader-loadLibraries, the functions are loaded with an offset of 0x10000, which is the same with Ghidra GUI. And the Functions have a correct body.

get new Program Function checkNIPCAHashCode: 0x1ab3c --> 0x1b2f3
get new Program Function check_new_nipca_auth: 0x1b2f4 --> 0x1b6f7
get new Program Function readText: 0x1b6f8 --> 0x1b733
get new Program Function printTextLine: 0x1b734 --> 0x1b7f7
get new Program Function getValBuf: 0x1b7f8 --> 0x1b8c7
get new Program Function checkToken_localrecording: 0x1b8c8 --> 0x1bc7f

Can I assume that when loading with -loader-loadLibraries, if the file does not exist in the project, it only loads partial information of the file, whereas using import allows a complete analysis of the binary information?

[ryanmkurtz]

When you use -loader-loadLibraries true, it does exactly what setting the "Load Libraries From Disk" option does in the import dialog options window. It will import any new libraries that were found, but it will not analyze them. Perhaps that is your problem...they may not be analyzed yet.

[CookedMelon]

That's correct. By the way, is there any way to perform an analysis of the Program object in the script that achieves the similar effect as ghidraheadless import?

[ryanmkurtz]

AutoAnalysisManager mgr = AutoAnalysisManager.getAnalysisManager(program);
mgr.startAnalysis(monitor, true);

[CookedMelon]

Thank you very much for the pointers! I finally success to import the program in this way. With the code in GhidraProject.java

AutoAnalysisManager mgr = AutoAnalysisManager.getAnalysisManager(externalProgram);
int commitID = externalProgram.startTransaction("Apply External Analyse");
mgr.initializeOptions();
mgr.reAnalyzeAll(null);
mgr.startAnalysis(monitor, true);
externalProgram.endTransaction(commitID, true);