public static List <UInt32> ReadImportAddresses(FileStream inputFile, OptionalHeaderDataDirectories optionalHeaderDataDirectories, List <SectionTable> sectionTables)
{
inputFile.Position = ImportAddressTable.StartingPosition(optionalHeaderDataDirectories, sectionTables);
var importAddresses = new List <UInt32>();
for (int i = 0; i < optionalHeaderDataDirectories.IATSize; i++)
{
importAddresses.Add(inputFile.ReadStructure <UInt32>().Value);
}
return(importAddresses);
}
private static void DissectTextSection(Dictionary <string, SectionTable> sectionTables, FileStream inputFile, OptionalHeaderDataDirectories?optionalHeaderDataDirectories)
{
//Import Address Table
var importAddresses = ImportAddressTable.ReadImportAddresses(inputFile, optionalHeaderDataDirectories.Value, sectionTables.Values.ToList());
Console.WriteLine("Import Address Table");
Console.WriteLine("====================");
foreach (var importAddress in importAddresses)
{
Console.WriteLine(" Import Address {0:X}", importAddress);
}
//CLR Header
inputFile.Position = CLRHeader.StartingPosition(optionalHeaderDataDirectories.Value, sectionTables.Values.ToList());
WriteStartingAddress(inputFile);
CLRHeader?
clrHeader = inputFile.
ReadStructure <CLRHeader>();
Console.WriteLine(
clrHeader.ToString());
//Strong Name Signature
StrongNameSignature?strongNameSignature;
if (clrHeader.Value.StrongNameSignature != 0)
{
inputFile.Position = StrongNameSignature.StartingPosition(clrHeader.Value, sectionTables.Values.ToList());
WriteStartingAddress(inputFile);
strongNameSignature = inputFile.
ReadStructure <StrongNameSignature>();
Console.WriteLine(
strongNameSignature.ToString());
}
//IL Code and Managed Structure Exception Handling Tables
ExceptionHandlingTable?exceptionHandlingTable;
if (optionalHeaderDataDirectories.Value.ExceptionTable != 0)
{
inputFile.Position = ExceptionHandlingTable.StartingPosition(optionalHeaderDataDirectories.Value, sectionTables.Values.ToList());
WriteStartingAddress(inputFile);
exceptionHandlingTable = inputFile.
ReadStructure <ExceptionHandlingTable>();
Console.WriteLine(
exceptionHandlingTable.ToString());
}
//Debug Directory
DebugDirectory?debugDirectory;
CodeViewHeader?codeViewHeader;
if (optionalHeaderDataDirectories.Value.Debug != 0)
{
inputFile.Position = DebugDirectory.StartingPosition(optionalHeaderDataDirectories.Value, sectionTables.Values.ToList());
WriteStartingAddress(inputFile);
debugDirectory = inputFile.ReadStructure <DebugDirectory>();
Console.WriteLine(
debugDirectory.ToString());
inputFile.Position = CodeViewHeader.StartingPosition(debugDirectory.Value, sectionTables.Values.ToList());
WriteStartingAddress(inputFile);
codeViewHeader = inputFile.ReadStructure <CodeViewHeader>();
Console.WriteLine(
codeViewHeader.ToString());
}
GeneralMetadataHeader generalMetadataHeader =
new GeneralMetadataHeader(clrHeader.Value, sectionTables.Values.ToList(), inputFile);
WriteStartingAddress(generalMetadataHeader.startingAddress);
Console.WriteLine(
generalMetadataHeader.ToString());
inputFile.Position = MetadataStorageHeader.StartingPosition(generalMetadataHeader);
WriteStartingAddress(inputFile);
MetadataStorageHeader?metadataStorageHeader =
inputFile.ReadStructure <MetadataStorageHeader>();
Console.WriteLine(metadataStorageHeader.ToString());
Dictionary <string, MetadataStreamHeader> streams = new Dictionary <string, MetadataStreamHeader>();
for (int i = 0; i < metadataStorageHeader.Value.iStreams; i++)
{
WriteStartingAddress(inputFile);
MetadataStreamHeader
streamHeader = new MetadataStreamHeader(inputFile);
Console.WriteLine(
streamHeader.ToString());
streams.Add(streamHeader.rcName, streamHeader);
}
}