コード例 #1
0
ファイル: Program.cs プロジェクト: GMMan/dgf-text-inject
        static uint UpdateTable(PEFile pe, uint tableRva, int entryPointerOffset, int entrySize, List <uint> offsets, uint?newSectionRva)
        {
            var tableSection = pe.GetSectionContainingRva(tableRva);
            var tableData    = ((tableSection.Contents as VirtualSegment).PhysicalContents as DataSegment).Data;

            using MemoryStream tableMs = new MemoryStream(tableData);
            tableMs.Seek(tableRva - tableSection.Rva, SeekOrigin.Begin);
            BinaryWriter bw = new BinaryWriter(tableMs);

            uint dataBaseVa;

            if (newSectionRva.HasValue)
            {
                dataBaseVa = (uint)(pe.OptionalHeader.ImageBase + newSectionRva.Value);
            }
            else
            {
                // Get first string offset
                tableMs.Seek(entryPointerOffset, SeekOrigin.Current);
                BinaryReader br = new BinaryReader(tableMs);
                dataBaseVa = br.ReadUInt32();
                tableMs.Seek(-(entryPointerOffset + 4), SeekOrigin.Current);
            }

            foreach (var offset in offsets)
            {
                tableMs.Seek(entryPointerOffset, SeekOrigin.Current);
                bw.Write(dataBaseVa + offset);
                tableMs.Seek(entrySize - entryPointerOffset - 4, SeekOrigin.Current);
            }

            tableMs.Flush();
            return((uint)(dataBaseVa - pe.OptionalHeader.ImageBase));
        }
コード例 #2
0
ファイル: Program.cs プロジェクト: GMMan/dgf-text-inject
        static void DumpStrings(PEFile pe, uint tableRva, int numEntries, int entryPointerOffset, int entrySize, StreamWriter sw)
        {
            var tableSection = pe.GetSectionContainingRva(tableRva);
            var tableData    = ((tableSection.Contents as VirtualSegment).PhysicalContents as DataSegment).Data;

            using MemoryStream tableMs = new MemoryStream(tableData);
            tableMs.Seek(tableRva - tableSection.Rva, SeekOrigin.Begin);
            BinaryReader br = new BinaryReader(tableMs);

            for (int i = 0; i < numEntries; ++i)
            {
                var tablePos = tableMs.Position;
                tableMs.Seek(entryPointerOffset, SeekOrigin.Current);
                uint stringVa = br.ReadUInt32();
                tableMs.Seek((long)(stringVa - pe.OptionalHeader.ImageBase - tableSection.Rva), SeekOrigin.Begin);
                List <byte> stringBytes = new List <byte>();
                byte        b;
                while ((b = br.ReadByte()) != 0)
                {
                    stringBytes.Add(b);
                }
                sw.WriteLine(shiftJisEncoding.GetString(stringBytes.ToArray()));
                tableMs.Seek(tablePos + entrySize, SeekOrigin.Begin);
            }
        }