public void CreatesEmptyListIfNullIsPassedIn()
{
var ar = new AddressResolver(new Uri("bolt://virtual.uri:1234"), null);
var response = ar.Resolve(ServerAddress.From("virtual.uri", 1234));
response.Should().HaveCount(0);
}
public void PassesBackCorrectUris()
{
const string uri1 = "x.acme.com";
const string uri2 = "y.acme.com";
var ar = new AddressResolver("bolt://virtual.uri", new [] { $"bolt://{uri1}", "bolt://" + uri2 });
var response = ar.Resolve(null).ToList();
response.Should().HaveCount(2);
response.Any(x => x.Host == uri1).Should().BeTrue();
response.Any(x => x.Host == uri2).Should().BeTrue();
}
internal IEnumerable <string> GetImportSymbols()
{
if (Dirs[1].VirtualAddress != 0)
{
var pos = Resolver.Resolve(Dirs[1].VirtualAddress);
for (uint i = 0; ; i++)
{
File.Seek(pos, SeekOrigin.Begin);
var imp = Reader.ReadStruct <ImportDir>();
pos = (uint)File.Position;
if (imp.Name == 0)
{
break;
}
var pos2 = Resolver.Resolve(imp.FirstThunk);
for (uint j = 0; ; j++)
{
File.Seek(pos2, SeekOrigin.Begin);
var thunk = Reader.ReadStruct <ImportDirThunk>();
pos2 = (uint)File.Position;
if (thunk.IsEmpty())
{
break;
}
if (thunk.TryGetOrdinal(out var _))
{
}
else
{
File.SeekRVA(Resolver, (uint)thunk.Value);
Reader.ReadStruct <ImportDirThunkHint>();
yield return(Reader.ReadByteString());
}
}
}
}
}
static void Main(string[] args)
{
logger.LogLevel = LogLevel.Error;
fileSender.Logger.LogLevel = logger.LogLevel;
DisplayCommands();
while (true)
{
try
{
string cmd = Console.ReadLine();
if (cmd == "exit")
{
return;
}
string[] arguments = cmd.Split(' ');
if (arguments.Length > 0 && arguments[0] == "receive")
{
string path = arguments.Length > 1 ? AssemblePath(arguments, 1, arguments.Length) : Constants.DefaultReceiveFolder;
StartReceiving(path, Constants.DefaultPort);
logger.Log(LogLevel.Priority, "Saving received files to: \"{0}\"", path);
}
else if (arguments.Length > 1 && arguments[0] == "send")
{
destination = AddressResolver.Resolve(arguments[1], Constants.DefaultPort);
logger.Log(LogLevel.Priority, "Enter file path to send to " + destination);
}
else if (destination != null)
{
Send(cmd.Trim('\"'));
}
else
{
logger.Log(LogLevel.Error, "Command not recognized.");
DisplayCommands();
}
}
catch (Exception ex)
{
logger.Log(LogLevel.Error, ex.Message);
}
}
}
private static void RealMain(Options options)
{
try {
using var file = File.OpenRead(options.InputFile);
using var reader = new BinaryReader(file);
var header = reader.ReadStruct <DosHeader>();
var ntheader_address = header.AddressOfNewExeHeader;
file.Seek(ntheader_address, SeekOrigin.Begin);
var ntheader = reader.ReadStruct <NtHeader>();
if (ntheader.Signature != 0x4550)
{
Console.WriteLine("Failed to parse nt header");
return;
}
if (ntheader.FileHeader.Machine != 0x8664)
{
Console.WriteLine("Failed to parse nt header: only accept AMD64 architect: {0:X}", ntheader.FileHeader.Machine);
return;
}
if (ntheader.OptionalHeader.Magic != 0x20B)
{
Console.WriteLine("Failed to parse nt optional header: only accept AMD64 architect: magic {0:X}", ntheader.OptionalHeader.Magic);
return;
}
var imagesize = ntheader.OptionalHeader.SizeOfImage;
Console.WriteLine("Image Size: {0:X}", imagesize);
var dirs = new DataDir[16];
for (var i = 0; i < 16; i++)
{
var dir = reader.ReadStruct <DataDir>();
Console.WriteLine("Data dir: {0:X8} {1:X8} ({2})", dir.VirtualAddress, dir.Size, DataDirName[i]);
dirs[i] = dir;
}
var resolver = new AddressResolver(ntheader.FileHeader.NumberOfSections);
for (uint i = 0; i < ntheader.FileHeader.NumberOfSections; i++)
{
var secheader = reader.ReadStruct <SectionHeader>();
Console.WriteLine("{0, 8}\n\t{1:X8}(Virtual Size)\n\t{2:X8}(Virtual Address)\n\t{3:X8}(Raw Data Size)\n\t{4:X8}(Raw Data Offset)\n\t{5:X8}(Diff)\n\tBITMAP: {6:X8}",
secheader.GetName(),
secheader.Misc.VirtualSize,
secheader.VirtualAddress,
secheader.SizeOfRawData,
secheader.PointerToRawData,
secheader.VirtualAddress - secheader.PointerToRawData,
secheader.Characteristics);
resolver.Put(secheader);
}
// Export table
if (dirs[0].VirtualAddress != 0)
{
file.SeekRVA(resolver, dirs[0].VirtualAddress);
var exp = reader.ReadStruct <ExportDir>();
file.SeekRVA(resolver, exp.Name);
Console.WriteLine("Dll Name: {0}", reader.ReadByteString());
file.SeekRVA(resolver, exp.AddressOfFunctions);
var addrs = new uint[exp.NumberOfFunctions];
for (uint i = 0; i < exp.NumberOfFunctions; i++)
{
addrs[i] = reader.ReadStruct <RVA>().Value;
}
file.SeekRVA(resolver, exp.AddressOfOrdinals);
var ords = new ushort[exp.NumberOfNames];
for (uint i = 0; i < exp.NumberOfNames; i++)
{
ords[i] = reader.ReadStruct <Ordinal>().Value;
}
var names = new string[exp.NumberOfNames];
for (uint i = 0; i < exp.NumberOfNames; i++)
{
file.SeekRVA(resolver, exp.AddressOfNames + i * sizeof(uint));
file.SeekRVA(resolver, reader.ReadStruct <RVA>().Value);
names[i] = reader.ReadByteString();
Console.WriteLine("export: {2:X8} <- {1:X4}:{0}", names[i], ords[i], addrs[ords[i]]);
}
}
// Import table
if (dirs[1].VirtualAddress != 0)
{
var pos = resolver.Resolve(dirs[1].VirtualAddress);
for (uint i = 0; ; i++)
{
file.Seek(pos, SeekOrigin.Begin);
var imp = reader.ReadStruct <ImportDir>();
pos = (uint)file.Position;
if (imp.Name == 0)
{
break;
}
file.SeekRVA(resolver, imp.Name);
Console.WriteLine("import from {0}", reader.ReadByteString());
var pos2 = resolver.Resolve(imp.FirstThunk);
for (uint j = 0; ; j++)
{
file.Seek(pos2, SeekOrigin.Begin);
var thunk = reader.ReadStruct <ImportDirThunk>();
pos2 = (uint)file.Position;
if (thunk.IsEmpty())
{
break;
}
if (thunk.TryGetOrdinal(out var ord))
{
Console.WriteLine("#{0}", ord);
}
else
{
file.SeekRVA(resolver, (uint)thunk.Value);
var hint = reader.ReadStruct <ImportDirThunkHint>().Hint;
Console.WriteLine("\t{0:X4}:{1}", hint, reader.ReadByteString());
}
}
}
}
} catch (Exception e) {
Console.WriteLine(e.ToString());
}
}
