diff --git a/Src/Debug Application/Program.cs b/Src/Debug Application/Program.cs
index def4f5e..e2184ed 100644
--- a/Src/Debug Application/Program.cs
+++ b/Src/Debug Application/Program.cs
@@ -23,9 +23,9 @@ static void Main(string[] args)
//string file_name = Assembly.GetEntryAssembly().Location;
//string file_name = @"C:\Windows\SysWOW64\kernel32.dll";
//string file_name = @"C:\Windows\System32\kernel32.dll";
- string file_name = @"C:\Windows\SysWOW64\shell32.dll";
+ //string file_name = @"C:\Windows\SysWOW64\shell32.dll";
//string file_name = @"C:\Windows\System32\shell32.dll";
- //string file_name = @"C:\Windows\System32\user32.dll";
+ string file_name = @"C:\Windows\System32\user32.dll";
//string file_name = @"C:\Windows\explorer.exe";
//string file_name = @"C:\Windows\SysWOW64\xpsservices.dll";
//string file_name = @"c:\windows\system32\advapi32.dll";
@@ -42,11 +42,18 @@ static void Main(string[] args)
ExecutableImage image = ExecutableImage.FromFile(file_name);
ResourceCollection resources = ResourceCollection.Get(image);
+
+ ResourceType group_types = resources.First(t => t.Id == ResourceType.RT_GROUP_CURSOR);
+ Resource group_resource = group_types.First(r => r.Id == 100);
+ CursorGroupResource cursor_group_resource = CursorGroupResource.Load(group_resource);
+
ResourceType types = resources.First(t => t.Id == ResourceType.RT_CURSOR);
- Resource resource = types.First(r => r.Id == 97);
+ Resource resource = types.First(r => r.Id == 92);
CursorResource cursor_resource = CursorResource.Load(resource);
- cursor_resource.Save(@"D:\test.cur");
+ Bitmap bitmap = cursor_resource.ToBitmap();
+
+ bitmap.Save(@"D:\test.bmp");
}
diff --git a/Src/PE Dump/App.config b/Src/PE Dump/App.config
new file mode 100644
index 0000000..74ade9d
--- /dev/null
+++ b/Src/PE Dump/App.config
@@ -0,0 +1,6 @@
+
+
+
+
+
+
diff --git a/Src/PE Dump/Options.cs b/Src/PE Dump/Options.cs
new file mode 100644
index 0000000..f4b9d7c
--- /dev/null
+++ b/Src/PE Dump/Options.cs
@@ -0,0 +1,1474 @@
+//
+// Options.cs
+//
+// Authors:
+// Jonathan Pryor
+// Federico Di Gregorio
+// Rolf Bjarne Kvinge
+//
+// Copyright (C) 2008 Novell (http://www.novell.com)
+// Copyright (C) 2009 Federico Di Gregorio.
+// Copyright (C) 2012 Xamarin Inc (http://www.xamarin.com)
+//
+// Permission is hereby granted, free of charge, to any person obtaining
+// a copy of this software and associated documentation files (the
+// "Software"), to deal in the Software without restriction, including
+// without limitation the rights to use, copy, modify, merge, publish,
+// distribute, sublicense, and/or sell copies of the Software, and to
+// permit persons to whom the Software is furnished to do so, subject to
+// the following conditions:
+//
+// The above copyright notice and this permission notice shall be
+// included in all copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+// LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+//
+
+// Compile With:
+// gmcs -debug+ -r:System.Core Options.cs -o:NDesk.Options.dll
+// gmcs -debug+ -d:LINQ -r:System.Core Options.cs -o:NDesk.Options.dll
+//
+// The LINQ version just changes the implementation of
+// OptionSet.Parse(IEnumerable), and confers no semantic changes.
+
+//
+// A Getopt::Long-inspired option parsing library for C#.
+//
+// NDesk.Options.OptionSet is built upon a key/value table, where the
+// key is a option format string and the value is a delegate that is
+// invoked when the format string is matched.
+//
+// Option format strings:
+// Regex-like BNF Grammar:
+// name: .+
+// type: [=:]
+// sep: ( [^{}]+ | '{' .+ '}' )?
+// aliases: ( name type sep ) ( '|' name type sep )*
+//
+// Each '|'-delimited name is an alias for the associated action. If the
+// format string ends in a '=', it has a required value. If the format
+// string ends in a ':', it has an optional value. If neither '=' or ':'
+// is present, no value is supported. `=' or `:' need only be defined on one
+// alias, but if they are provided on more than one they must be consistent.
+//
+// Each alias portion may also end with a "key/value separator", which is used
+// to split option values if the option accepts > 1 value. If not specified,
+// it defaults to '=' and ':'. If specified, it can be any character except
+// '{' and '}' OR the *string* between '{' and '}'. If no separator should be
+// used (i.e. the separate values should be distinct arguments), then "{}"
+// should be used as the separator.
+//
+// Options are extracted either from the current option by looking for
+// the option name followed by an '=' or ':', or is taken from the
+// following option IFF:
+// - The current option does not contain a '=' or a ':'
+// - The current option requires a value (i.e. not a Option type of ':')
+//
+// The `name' used in the option format string does NOT include any leading
+// option indicator, such as '-', '--', or '/'. All three of these are
+// permitted/required on any named option.
+//
+// Option bundling is permitted so long as:
+// - '-' is used to start the option group
+// - all of the bundled options are a single character
+// - at most one of the bundled options accepts a value, and the value
+// provided starts from the next character to the end of the string.
+//
+// This allows specifying '-a -b -c' as '-abc', and specifying '-D name=value'
+// as '-Dname=value'.
+//
+// Option processing is disabled by specifying "--". All options after "--"
+// are returned by OptionSet.Parse() unchanged and unprocessed.
+//
+// Unprocessed options are returned from OptionSet.Parse().
+//
+// Examples:
+// int verbose = 0;
+// OptionSet p = new OptionSet ()
+// .Add ("v", v => ++verbose)
+// .Add ("name=|value=", v => Console.WriteLine (v));
+// p.Parse (new string[]{"-v", "--v", "/v", "-name=A", "/name", "B", "extra"});
+//
+// The above would parse the argument string array, and would invoke the
+// lambda expression three times, setting `verbose' to 3 when complete.
+// It would also print out "A" and "B" to standard output.
+// The returned array would contain the string "extra".
+//
+// C# 3.0 collection initializers are supported and encouraged:
+// var p = new OptionSet () {
+// { "h|?|help", v => ShowHelp () },
+// };
+//
+// System.ComponentModel.TypeConverter is also supported, allowing the use of
+// custom data types in the callback type; TypeConverter.ConvertFromString()
+// is used to convert the value option to an instance of the specified
+// type:
+//
+// var p = new OptionSet () {
+// { "foo=", (Foo f) => Console.WriteLine (f.ToString ()) },
+// };
+//
+// Random other tidbits:
+// - Boolean options (those w/o '=' or ':' in the option format string)
+// are explicitly enabled if they are followed with '+', and explicitly
+// disabled if they are followed with '-':
+// string a = null;
+// var p = new OptionSet () {
+// { "a", s => a = s },
+// };
+// p.Parse (new string[]{"-a"}); // sets v != null
+// p.Parse (new string[]{"-a+"}); // sets v != null
+// p.Parse (new string[]{"-a-"}); // sets v == null
+//
+
+using System;
+using System.Collections;
+using System.Collections.Generic;
+using System.Collections.ObjectModel;
+using System.ComponentModel;
+using System.Globalization;
+using System.IO;
+using System.Runtime.Serialization;
+using System.Security.Permissions;
+using System.Text;
+using System.Text.RegularExpressions;
+
+#if LINQ
+using System.Linq;
+#endif
+
+#if TEST
+using NDesk.Options;
+#endif
+
+#if NDESK_OPTIONS
+namespace NDesk.Options
+#else
+namespace Mono.Options
+#endif
+{
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ static class StringCoda
+ {
+
+ public static IEnumerable WrappedLines(string self, params int[] widths)
+ {
+ IEnumerable w = widths;
+ return WrappedLines(self, w);
+ }
+
+ public static IEnumerable WrappedLines(string self, IEnumerable widths)
+ {
+ if (widths == null)
+ throw new ArgumentNullException("widths");
+ return CreateWrappedLinesIterator(self, widths);
+ }
+
+ private static IEnumerable CreateWrappedLinesIterator(string self, IEnumerable widths)
+ {
+ if (string.IsNullOrEmpty(self))
+ {
+ yield return string.Empty;
+ yield break;
+ }
+ using (IEnumerator ewidths = widths.GetEnumerator())
+ {
+ bool? hw = null;
+ int width = GetNextWidth(ewidths, int.MaxValue, ref hw);
+ int start = 0, end;
+ do
+ {
+ end = GetLineEnd(start, width, self);
+ char c = self[end - 1];
+ if (char.IsWhiteSpace(c))
+ --end;
+ bool needContinuation = end != self.Length && !IsEolChar(c);
+ string continuation = "";
+ if (needContinuation)
+ {
+ --end;
+ continuation = "-";
+ }
+ string line = self.Substring(start, end - start) + continuation;
+ yield return line;
+ start = end;
+ if (char.IsWhiteSpace(c))
+ ++start;
+ width = GetNextWidth(ewidths, width, ref hw);
+ } while (start < self.Length);
+ }
+ }
+
+ private static int GetNextWidth(IEnumerator ewidths, int curWidth, ref bool? eValid)
+ {
+ if (!eValid.HasValue || (eValid.HasValue && eValid.Value))
+ {
+ curWidth = (eValid = ewidths.MoveNext()).Value ? ewidths.Current : curWidth;
+ // '.' is any character, - is for a continuation
+ const string minWidth = ".-";
+ if (curWidth < minWidth.Length)
+ throw new ArgumentOutOfRangeException("widths",
+ string.Format("Element must be >= {0}, was {1}.", minWidth.Length, curWidth));
+ return curWidth;
+ }
+ // no more elements, use the last element.
+ return curWidth;
+ }
+
+ private static bool IsEolChar(char c)
+ {
+ return !char.IsLetterOrDigit(c);
+ }
+
+ private static int GetLineEnd(int start, int length, string description)
+ {
+ int end = System.Math.Min(start + length, description.Length);
+ int sep = -1;
+ for (int i = start; i < end; ++i)
+ {
+ if (description[i] == '\n')
+ return i + 1;
+ if (IsEolChar(description[i]))
+ sep = i + 1;
+ }
+ if (sep == -1 || end == description.Length)
+ return end;
+ return sep;
+ }
+ }
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ public class OptionValueCollection : IList, IList
+ {
+
+ List values = new List();
+ OptionContext c;
+
+ internal OptionValueCollection(OptionContext c)
+ {
+ this.c = c;
+ }
+
+ #region ICollection
+ void ICollection.CopyTo(Array array, int index) { (values as ICollection).CopyTo(array, index); }
+ bool ICollection.IsSynchronized { get { return (values as ICollection).IsSynchronized; } }
+ object ICollection.SyncRoot { get { return (values as ICollection).SyncRoot; } }
+ #endregion
+
+ #region ICollection
+ public void Add(string item) { values.Add(item); }
+ public void Clear() { values.Clear(); }
+ public bool Contains(string item) { return values.Contains(item); }
+ public void CopyTo(string[] array, int arrayIndex) { values.CopyTo(array, arrayIndex); }
+ public bool Remove(string item) { return values.Remove(item); }
+ public int Count { get { return values.Count; } }
+ public bool IsReadOnly { get { return false; } }
+ #endregion
+
+ #region IEnumerable
+ IEnumerator IEnumerable.GetEnumerator() { return values.GetEnumerator(); }
+ #endregion
+
+ #region IEnumerable
+ public IEnumerator GetEnumerator() { return values.GetEnumerator(); }
+ #endregion
+
+ #region IList
+ int IList.Add(object value) { return (values as IList).Add(value); }
+ bool IList.Contains(object value) { return (values as IList).Contains(value); }
+ int IList.IndexOf(object value) { return (values as IList).IndexOf(value); }
+ void IList.Insert(int index, object value) { (values as IList).Insert(index, value); }
+ void IList.Remove(object value) { (values as IList).Remove(value); }
+ void IList.RemoveAt(int index) { (values as IList).RemoveAt(index); }
+ bool IList.IsFixedSize { get { return false; } }
+ object IList.this[int index] { get { return this[index]; } set { (values as IList)[index] = value; } }
+ #endregion
+
+ #region IList
+ public int IndexOf(string item) { return values.IndexOf(item); }
+ public void Insert(int index, string item) { values.Insert(index, item); }
+ public void RemoveAt(int index) { values.RemoveAt(index); }
+
+ private void AssertValid(int index)
+ {
+ if (c.Option == null)
+ throw new InvalidOperationException("OptionContext.Option is null.");
+ if (index >= c.Option.MaxValueCount)
+ throw new ArgumentOutOfRangeException("index");
+ if (c.Option.OptionValueType == OptionValueType.Required &&
+ index >= values.Count)
+ throw new OptionException(string.Format(
+ c.OptionSet.MessageLocalizer("Missing required value for option '{0}'."), c.OptionName),
+ c.OptionName);
+ }
+
+ public string this[int index]
+ {
+ get
+ {
+ AssertValid(index);
+ return index >= values.Count ? null : values[index];
+ }
+ set
+ {
+ values[index] = value;
+ }
+ }
+ #endregion
+
+ public List ToList()
+ {
+ return new List(values);
+ }
+
+ public string[] ToArray()
+ {
+ return values.ToArray();
+ }
+
+ public override string ToString()
+ {
+ return string.Join(", ", values.ToArray());
+ }
+ }
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ public class OptionContext
+ {
+ private Option option;
+ private string name;
+ private int index;
+ private OptionSet set;
+ private OptionValueCollection c;
+
+ public OptionContext(OptionSet set)
+ {
+ this.set = set;
+ this.c = new OptionValueCollection(this);
+ }
+
+ public Option Option
+ {
+ get { return option; }
+ set { option = value; }
+ }
+
+ public string OptionName
+ {
+ get { return name; }
+ set { name = value; }
+ }
+
+ public int OptionIndex
+ {
+ get { return index; }
+ set { index = value; }
+ }
+
+ public OptionSet OptionSet
+ {
+ get { return set; }
+ }
+
+ public OptionValueCollection OptionValues
+ {
+ get { return c; }
+ }
+ }
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ public enum OptionValueType
+ {
+ None,
+ Optional,
+ Required,
+ }
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ public abstract class Option
+ {
+ string prototype, description;
+ string[] names;
+ OptionValueType type;
+ int count;
+ string[] separators;
+ bool hidden;
+
+ protected Option(string prototype, string description)
+ : this(prototype, description, 1, false)
+ {
+ }
+
+ protected Option(string prototype, string description, int maxValueCount)
+ : this(prototype, description, maxValueCount, false)
+ {
+ }
+
+ protected Option(string prototype, string description, int maxValueCount, bool hidden)
+ {
+ if (prototype == null)
+ throw new ArgumentNullException("prototype");
+ if (prototype.Length == 0)
+ throw new ArgumentException("Cannot be the empty string.", "prototype");
+ if (maxValueCount < 0)
+ throw new ArgumentOutOfRangeException("maxValueCount");
+
+ this.prototype = prototype;
+ this.description = description;
+ this.count = maxValueCount;
+ this.names = (this is OptionSet.Category)
+ // append GetHashCode() so that "duplicate" categories have distinct
+ // names, e.g. adding multiple "" categories should be valid.
+ ? new[] { prototype + this.GetHashCode() }
+ : prototype.Split('|');
+
+ if (this is OptionSet.Category)
+ return;
+
+ this.type = ParsePrototype();
+ this.hidden = hidden;
+
+ if (this.count == 0 && type != OptionValueType.None)
+ throw new ArgumentException(
+ "Cannot provide maxValueCount of 0 for OptionValueType.Required or " +
+ "OptionValueType.Optional.",
+ "maxValueCount");
+ if (this.type == OptionValueType.None && maxValueCount > 1)
+ throw new ArgumentException(
+ string.Format("Cannot provide maxValueCount of {0} for OptionValueType.None.", maxValueCount),
+ "maxValueCount");
+ if (Array.IndexOf(names, "<>") >= 0 &&
+ ((names.Length == 1 && this.type != OptionValueType.None) ||
+ (names.Length > 1 && this.MaxValueCount > 1)))
+ throw new ArgumentException(
+ "The default option handler '<>' cannot require values.",
+ "prototype");
+ }
+
+ public string Prototype { get { return prototype; } }
+ public string Description { get { return description; } }
+ public OptionValueType OptionValueType { get { return type; } }
+ public int MaxValueCount { get { return count; } }
+ public bool Hidden { get { return hidden; } }
+
+ public string[] GetNames()
+ {
+ return (string[])names.Clone();
+ }
+
+ public string[] GetValueSeparators()
+ {
+ if (separators == null)
+ return new string[0];
+ return (string[])separators.Clone();
+ }
+
+ protected static T Parse(string value, OptionContext c)
+ {
+ Type tt = typeof(T);
+ bool nullable = tt.IsValueType && tt.IsGenericType &&
+ !tt.IsGenericTypeDefinition &&
+ tt.GetGenericTypeDefinition() == typeof(Nullable<>);
+ Type targetType = nullable ? tt.GetGenericArguments()[0] : typeof(T);
+ TypeConverter conv = TypeDescriptor.GetConverter(targetType);
+ T t = default(T);
+ try
+ {
+ if (value != null)
+ t = (T)conv.ConvertFromString(value);
+ }
+ catch (Exception e)
+ {
+ throw new OptionException(
+ string.Format(
+ c.OptionSet.MessageLocalizer("Could not convert string `{0}' to type {1} for option `{2}'."),
+ value, targetType.Name, c.OptionName),
+ c.OptionName, e);
+ }
+ return t;
+ }
+
+ internal string[] Names { get { return names; } }
+ internal string[] ValueSeparators { get { return separators; } }
+
+ static readonly char[] NameTerminator = new char[] { '=', ':' };
+
+ private OptionValueType ParsePrototype()
+ {
+ char type = '\0';
+ List seps = new List();
+ for (int i = 0; i < names.Length; ++i)
+ {
+ string name = names[i];
+ if (name.Length == 0)
+ throw new ArgumentException("Empty option names are not supported.", "prototype");
+
+ int end = name.IndexOfAny(NameTerminator);
+ if (end == -1)
+ continue;
+ names[i] = name.Substring(0, end);
+ if (type == '\0' || type == name[end])
+ type = name[end];
+ else
+ throw new ArgumentException(
+ string.Format("Conflicting option types: '{0}' vs. '{1}'.", type, name[end]),
+ "prototype");
+ AddSeparators(name, end, seps);
+ }
+
+ if (type == '\0')
+ return OptionValueType.None;
+
+ if (count <= 1 && seps.Count != 0)
+ throw new ArgumentException(
+ string.Format("Cannot provide key/value separators for Options taking {0} value(s).", count),
+ "prototype");
+ if (count > 1)
+ {
+ if (seps.Count == 0)
+ this.separators = new string[] { ":", "=" };
+ else if (seps.Count == 1 && seps[0].Length == 0)
+ this.separators = null;
+ else
+ this.separators = seps.ToArray();
+ }
+
+ return type == '=' ? OptionValueType.Required : OptionValueType.Optional;
+ }
+
+ private static void AddSeparators(string name, int end, ICollection seps)
+ {
+ int start = -1;
+ for (int i = end + 1; i < name.Length; ++i)
+ {
+ switch (name[i])
+ {
+ case '{':
+ if (start != -1)
+ throw new ArgumentException(
+ string.Format("Ill-formed name/value separator found in \"{0}\".", name),
+ "prototype");
+ start = i + 1;
+ break;
+ case '}':
+ if (start == -1)
+ throw new ArgumentException(
+ string.Format("Ill-formed name/value separator found in \"{0}\".", name),
+ "prototype");
+ seps.Add(name.Substring(start, i - start));
+ start = -1;
+ break;
+ default:
+ if (start == -1)
+ seps.Add(name[i].ToString());
+ break;
+ }
+ }
+ if (start != -1)
+ throw new ArgumentException(
+ string.Format("Ill-formed name/value separator found in \"{0}\".", name),
+ "prototype");
+ }
+
+ public void Invoke(OptionContext c)
+ {
+ OnParseComplete(c);
+ c.OptionName = null;
+ c.Option = null;
+ c.OptionValues.Clear();
+ }
+
+ protected abstract void OnParseComplete(OptionContext c);
+
+ public override string ToString()
+ {
+ return Prototype;
+ }
+ }
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ public abstract class ArgumentSource
+ {
+
+ protected ArgumentSource()
+ {
+ }
+
+ public abstract string[] GetNames();
+ public abstract string Description { get; }
+ public abstract bool GetArguments(string value, out IEnumerable replacement);
+
+ public static IEnumerable GetArgumentsFromFile(string file)
+ {
+ return GetArguments(File.OpenText(file), true);
+ }
+
+ public static IEnumerable GetArguments(TextReader reader)
+ {
+ return GetArguments(reader, false);
+ }
+
+ // Cribbed from mcs/driver.cs:LoadArgs(string)
+ static IEnumerable GetArguments(TextReader reader, bool close)
+ {
+ try
+ {
+ StringBuilder arg = new StringBuilder();
+
+ string line;
+ while ((line = reader.ReadLine()) != null)
+ {
+ int t = line.Length;
+
+ for (int i = 0; i < t; i++)
+ {
+ char c = line[i];
+
+ if (c == '"' || c == '\'')
+ {
+ char end = c;
+
+ for (i++; i < t; i++)
+ {
+ c = line[i];
+
+ if (c == end)
+ break;
+ arg.Append(c);
+ }
+ }
+ else if (c == ' ')
+ {
+ if (arg.Length > 0)
+ {
+ yield return arg.ToString();
+ arg.Length = 0;
+ }
+ }
+ else
+ arg.Append(c);
+ }
+ if (arg.Length > 0)
+ {
+ yield return arg.ToString();
+ arg.Length = 0;
+ }
+ }
+ }
+ finally
+ {
+ if (close)
+ reader.Close();
+ }
+ }
+ }
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ public class ResponseFileSource : ArgumentSource
+ {
+
+ public override string[] GetNames()
+ {
+ return new string[] { "@file" };
+ }
+
+ public override string Description
+ {
+ get { return "Read response file for more options."; }
+ }
+
+ public override bool GetArguments(string value, out IEnumerable replacement)
+ {
+ if (string.IsNullOrEmpty(value) || !value.StartsWith("@"))
+ {
+ replacement = null;
+ return false;
+ }
+ replacement = ArgumentSource.GetArgumentsFromFile(value.Substring(1));
+ return true;
+ }
+ }
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ [Serializable]
+ public class OptionException : Exception
+ {
+ private string option;
+
+ public OptionException()
+ {
+ }
+
+ public OptionException(string message, string optionName)
+ : base(message)
+ {
+ this.option = optionName;
+ }
+
+ public OptionException(string message, string optionName, Exception innerException)
+ : base(message, innerException)
+ {
+ this.option = optionName;
+ }
+
+ protected OptionException(SerializationInfo info, StreamingContext context)
+ : base(info, context)
+ {
+ this.option = info.GetString("OptionName");
+ }
+
+ public string OptionName
+ {
+ get { return this.option; }
+ }
+
+ [SecurityPermission(SecurityAction.LinkDemand, SerializationFormatter = true)]
+ public override void GetObjectData(SerializationInfo info, StreamingContext context)
+ {
+ base.GetObjectData(info, context);
+ info.AddValue("OptionName", option);
+ }
+ }
+
+ public delegate void OptionAction(TKey key, TValue value);
+
+ [System.Reflection.Obfuscation(ApplyToMembers = true, StripAfterObfuscation = true)]
+ public class OptionSet : KeyedCollection
+ {
+ public OptionSet()
+ : this(delegate (string f) { return f; })
+ {
+ }
+
+ public OptionSet(Converter localizer)
+ {
+ this.localizer = localizer;
+ this.roSources = new ReadOnlyCollection(sources);
+ }
+
+ Converter localizer;
+
+ public Converter MessageLocalizer
+ {
+ get { return localizer; }
+ }
+
+ List sources = new List();
+ ReadOnlyCollection roSources;
+
+ public ReadOnlyCollection ArgumentSources
+ {
+ get { return roSources; }
+ }
+
+
+ protected override string GetKeyForItem(Option item)
+ {
+ if (item == null)
+ throw new ArgumentNullException("option");
+ if (item.Names != null && item.Names.Length > 0)
+ return item.Names[0];
+ // This should never happen, as it's invalid for Option to be
+ // constructed w/o any names.
+ throw new InvalidOperationException("Option has no names!");
+ }
+
+ [Obsolete("Use KeyedCollection.this[string]")]
+ protected Option GetOptionForName(string option)
+ {
+ if (option == null)
+ throw new ArgumentNullException("option");
+ try
+ {
+ return base[option];
+ }
+ catch (KeyNotFoundException)
+ {
+ return null;
+ }
+ }
+
+ protected override void InsertItem(int index, Option item)
+ {
+ base.InsertItem(index, item);
+ AddImpl(item);
+ }
+
+ protected override void RemoveItem(int index)
+ {
+ Option p = Items[index];
+ base.RemoveItem(index);
+ // KeyedCollection.RemoveItem() handles the 0th item
+ for (int i = 1; i < p.Names.Length; ++i)
+ {
+ Dictionary.Remove(p.Names[i]);
+ }
+ }
+
+ protected override void SetItem(int index, Option item)
+ {
+ base.SetItem(index, item);
+ AddImpl(item);
+ }
+
+ private void AddImpl(Option option)
+ {
+ if (option == null)
+ throw new ArgumentNullException("option");
+ List added = new List(option.Names.Length);
+ try
+ {
+ // KeyedCollection.InsertItem/SetItem handle the 0th name.
+ for (int i = 1; i < option.Names.Length; ++i)
+ {
+ Dictionary.Add(option.Names[i], option);
+ added.Add(option.Names[i]);
+ }
+ }
+ catch (Exception)
+ {
+ foreach (string name in added)
+ Dictionary.Remove(name);
+ throw;
+ }
+ }
+
+ public OptionSet Add(string header)
+ {
+ if (header == null)
+ throw new ArgumentNullException("header");
+ Add(new Category(header));
+ return this;
+ }
+
+ internal sealed class Category : Option
+ {
+
+ // Prototype starts with '=' because this is an invalid prototype
+ // (see Option.ParsePrototype(), and thus it'll prevent Category
+ // instances from being accidentally used as normal options.
+ public Category(string description)
+ : base("=:Category:= " + description, description)
+ {
+ }
+
+ protected override void OnParseComplete(OptionContext c)
+ {
+ throw new NotSupportedException("Category.OnParseComplete should not be invoked.");
+ }
+ }
+
+
+ public new OptionSet Add(Option option)
+ {
+ base.Add(option);
+ return this;
+ }
+
+ sealed class ActionOption : Option
+ {
+ Action action;
+
+ public ActionOption(string prototype, string description, int count, Action action)
+ : this(prototype, description, count, action, false)
+ {
+ }
+
+ public ActionOption(string prototype, string description, int count, Action action, bool hidden)
+ : base(prototype, description, count, hidden)
+ {
+ if (action == null)
+ throw new ArgumentNullException("action");
+ this.action = action;
+ }
+
+ protected override void OnParseComplete(OptionContext c)
+ {
+ action(c.OptionValues);
+ }
+ }
+
+ public OptionSet Add(string prototype, Action action)
+ {
+ return Add(prototype, null, action);
+ }
+
+ public OptionSet Add(string prototype, string description, Action action)
+ {
+ return Add(prototype, description, action, false);
+ }
+
+ public OptionSet Add(string prototype, string description, Action action, bool hidden)
+ {
+ if (action == null)
+ throw new ArgumentNullException("action");
+ Option p = new ActionOption(prototype, description, 1,
+ delegate (OptionValueCollection v) { action(v[0]); }, hidden);
+ base.Add(p);
+ return this;
+ }
+
+ public OptionSet Add(string prototype, OptionAction action)
+ {
+ return Add(prototype, null, action);
+ }
+
+ public OptionSet Add(string prototype, string description, OptionAction action)
+ {
+ return Add(prototype, description, action, false);
+ }
+
+ public OptionSet Add(string prototype, string description, OptionAction action, bool hidden)
+ {
+ if (action == null)
+ throw new ArgumentNullException("action");
+ Option p = new ActionOption(prototype, description, 2,
+ delegate (OptionValueCollection v) { action(v[0], v[1]); }, hidden);
+ base.Add(p);
+ return this;
+ }
+
+ sealed class ActionOption : Option
+ {
+ Action action;
+
+ public ActionOption(string prototype, string description, Action action)
+ : base(prototype, description, 1)
+ {
+ if (action == null)
+ throw new ArgumentNullException("action");
+ this.action = action;
+ }
+
+ protected override void OnParseComplete(OptionContext c)
+ {
+ action(Parse(c.OptionValues[0], c));
+ }
+ }
+
+ sealed class ActionOption : Option
+ {
+ OptionAction action;
+
+ public ActionOption(string prototype, string description, OptionAction action)
+ : base(prototype, description, 2)
+ {
+ if (action == null)
+ throw new ArgumentNullException("action");
+ this.action = action;
+ }
+
+ protected override void OnParseComplete(OptionContext c)
+ {
+ action(
+ Parse(c.OptionValues[0], c),
+ Parse(c.OptionValues[1], c));
+ }
+ }
+
+ public OptionSet Add(string prototype, Action action)
+ {
+ return Add(prototype, null, action);
+ }
+
+ public OptionSet Add(string prototype, string description, Action action)
+ {
+ return Add(new ActionOption(prototype, description, action));
+ }
+
+ public OptionSet Add(string prototype, OptionAction action)
+ {
+ return Add(prototype, null, action);
+ }
+
+ public OptionSet Add(string prototype, string description, OptionAction action)
+ {
+ return Add(new ActionOption(prototype, description, action));
+ }
+
+ public OptionSet Add(ArgumentSource source)
+ {
+ if (source == null)
+ throw new ArgumentNullException("source");
+ sources.Add(source);
+ return this;
+ }
+
+ protected virtual OptionContext CreateOptionContext()
+ {
+ return new OptionContext(this);
+ }
+
+ public List Parse(IEnumerable arguments)
+ {
+ if (arguments == null)
+ throw new ArgumentNullException("arguments");
+ OptionContext c = CreateOptionContext();
+ c.OptionIndex = -1;
+ bool process = true;
+ List unprocessed = new List();
+ Option def = Contains("<>") ? this["<>"] : null;
+ ArgumentEnumerator ae = new ArgumentEnumerator(arguments);
+ foreach (string argument in ae)
+ {
+ ++c.OptionIndex;
+ if (argument == "--")
+ {
+ process = false;
+ continue;
+ }
+ if (!process)
+ {
+ Unprocessed(unprocessed, def, c, argument);
+ continue;
+ }
+ if (AddSource(ae, argument))
+ continue;
+ if (!Parse(argument, c))
+ Unprocessed(unprocessed, def, c, argument);
+ }
+ if (c.Option != null)
+ c.Option.Invoke(c);
+ return unprocessed;
+ }
+
+ class ArgumentEnumerator : IEnumerable
+ {
+ List> sources = new List>();
+
+ public ArgumentEnumerator(IEnumerable arguments)
+ {
+ sources.Add(arguments.GetEnumerator());
+ }
+
+ public void Add(IEnumerable arguments)
+ {
+ sources.Add(arguments.GetEnumerator());
+ }
+
+ public IEnumerator GetEnumerator()
+ {
+ do
+ {
+ IEnumerator c = sources[sources.Count - 1];
+ if (c.MoveNext())
+ yield return c.Current;
+ else
+ {
+ c.Dispose();
+ sources.RemoveAt(sources.Count - 1);
+ }
+ } while (sources.Count > 0);
+ }
+
+ IEnumerator IEnumerable.GetEnumerator()
+ {
+ return GetEnumerator();
+ }
+ }
+
+ bool AddSource(ArgumentEnumerator ae, string argument)
+ {
+ foreach (ArgumentSource source in sources)
+ {
+ IEnumerable replacement;
+ if (!source.GetArguments(argument, out replacement))
+ continue;
+ ae.Add(replacement);
+ return true;
+ }
+ return false;
+ }
+
+ private static bool Unprocessed(ICollection extra, Option def, OptionContext c, string argument)
+ {
+ if (def == null)
+ {
+ extra.Add(argument);
+ return false;
+ }
+ c.OptionValues.Add(argument);
+ c.Option = def;
+ c.Option.Invoke(c);
+ return false;
+ }
+
+ private readonly Regex ValueOption = new Regex(
+ @"^(?--|-|/)(?[^:=]+)((?[:=])(?.*))?$");
+
+ protected bool GetOptionParts(string argument, out string flag, out string name, out string sep, out string value)
+ {
+ if (argument == null)
+ throw new ArgumentNullException("argument");
+
+ flag = name = sep = value = null;
+ Match m = ValueOption.Match(argument);
+ if (!m.Success)
+ {
+ return false;
+ }
+ flag = m.Groups["flag"].Value;
+ name = m.Groups["name"].Value;
+ if (m.Groups["sep"].Success && m.Groups["value"].Success)
+ {
+ sep = m.Groups["sep"].Value;
+ value = m.Groups["value"].Value;
+ }
+ return true;
+ }
+
+ protected virtual bool Parse(string argument, OptionContext c)
+ {
+ if (c.Option != null)
+ {
+ ParseValue(argument, c);
+ return true;
+ }
+
+ string f, n, s, v;
+ if (!GetOptionParts(argument, out f, out n, out s, out v))
+ return false;
+
+ Option p;
+ if (Contains(n))
+ {
+ p = this[n];
+ c.OptionName = f + n;
+ c.Option = p;
+ switch (p.OptionValueType)
+ {
+ case OptionValueType.None:
+ c.OptionValues.Add(n);
+ c.Option.Invoke(c);
+ break;
+ case OptionValueType.Optional:
+ case OptionValueType.Required:
+ ParseValue(v, c);
+ break;
+ }
+ return true;
+ }
+ // no match; is it a bool option?
+ if (ParseBool(argument, n, c))
+ return true;
+ // is it a bundled option?
+ if (ParseBundledValue(f, string.Concat(n + s + v), c))
+ return true;
+
+ return false;
+ }
+
+ private void ParseValue(string option, OptionContext c)
+ {
+ if (option != null)
+ foreach (string o in c.Option.ValueSeparators != null
+ ? option.Split(c.Option.ValueSeparators, c.Option.MaxValueCount - c.OptionValues.Count, StringSplitOptions.None)
+ : new string[] { option })
+ {
+ c.OptionValues.Add(o);
+ }
+ if (c.OptionValues.Count == c.Option.MaxValueCount ||
+ c.Option.OptionValueType == OptionValueType.Optional)
+ c.Option.Invoke(c);
+ else if (c.OptionValues.Count > c.Option.MaxValueCount)
+ {
+ throw new OptionException(localizer(string.Format(
+ "Error: Found {0} option values when expecting {1}.",
+ c.OptionValues.Count, c.Option.MaxValueCount)),
+ c.OptionName);
+ }
+ }
+
+ private bool ParseBool(string option, string n, OptionContext c)
+ {
+ Option p;
+ string rn;
+ if (n.Length >= 1 && (n[n.Length - 1] == '+' || n[n.Length - 1] == '-') &&
+ Contains((rn = n.Substring(0, n.Length - 1))))
+ {
+ p = this[rn];
+ string v = n[n.Length - 1] == '+' ? option : null;
+ c.OptionName = option;
+ c.Option = p;
+ c.OptionValues.Add(v);
+ p.Invoke(c);
+ return true;
+ }
+ return false;
+ }
+
+ private bool ParseBundledValue(string f, string n, OptionContext c)
+ {
+ if (f != "-")
+ return false;
+ for (int i = 0; i < n.Length; ++i)
+ {
+ Option p;
+ string opt = f + n[i].ToString();
+ string rn = n[i].ToString();
+ if (!Contains(rn))
+ {
+ if (i == 0)
+ return false;
+ throw new OptionException(string.Format(localizer(
+ "Cannot bundle unregistered option '{0}'."), opt), opt);
+ }
+ p = this[rn];
+ switch (p.OptionValueType)
+ {
+ case OptionValueType.None:
+ Invoke(c, opt, n, p);
+ break;
+ case OptionValueType.Optional:
+ case OptionValueType.Required:
+ {
+ string v = n.Substring(i + 1);
+ c.Option = p;
+ c.OptionName = opt;
+ ParseValue(v.Length != 0 ? v : null, c);
+ return true;
+ }
+ default:
+ throw new InvalidOperationException("Unknown OptionValueType: " + p.OptionValueType);
+ }
+ }
+ return true;
+ }
+
+ private static void Invoke(OptionContext c, string name, string value, Option option)
+ {
+ c.OptionName = name;
+ c.Option = option;
+ c.OptionValues.Add(value);
+ option.Invoke(c);
+ }
+
+ private const int OptionWidth = 29;
+ private const int Description_FirstWidth = 80 - OptionWidth;
+ private const int Description_RemWidth = 80 - OptionWidth - 2;
+
+ public void WriteOptionDescriptions(TextWriter o)
+ {
+ foreach (Option p in this)
+ {
+ int written = 0;
+
+ if (p.Hidden)
+ continue;
+
+ Category c = p as Category;
+ if (c != null)
+ {
+ WriteDescription(o, p.Description, "", 80, 80);
+ continue;
+ }
+
+ if (!WriteOptionPrototype(o, p, ref written))
+ continue;
+
+ if (written < OptionWidth)
+ o.Write(new string(' ', OptionWidth - written));
+ else
+ {
+ o.WriteLine();
+ o.Write(new string(' ', OptionWidth));
+ }
+
+ WriteDescription(o, p.Description, new string(' ', OptionWidth + 2),
+ Description_FirstWidth, Description_RemWidth);
+ }
+
+ foreach (ArgumentSource s in sources)
+ {
+ string[] names = s.GetNames();
+ if (names == null || names.Length == 0)
+ continue;
+
+ int written = 0;
+
+ Write(o, ref written, " ");
+ Write(o, ref written, names[0]);
+ for (int i = 1; i < names.Length; ++i)
+ {
+ Write(o, ref written, ", ");
+ Write(o, ref written, names[i]);
+ }
+
+ if (written < OptionWidth)
+ o.Write(new string(' ', OptionWidth - written));
+ else
+ {
+ o.WriteLine();
+ o.Write(new string(' ', OptionWidth));
+ }
+
+ WriteDescription(o, s.Description, new string(' ', OptionWidth + 2),
+ Description_FirstWidth, Description_RemWidth);
+ }
+ }
+
+ void WriteDescription(TextWriter o, string value, string prefix, int firstWidth, int remWidth)
+ {
+ bool indent = false;
+ foreach (string line in GetLines(localizer(GetDescription(value)), firstWidth, remWidth))
+ {
+ if (indent)
+ o.Write(prefix);
+ o.WriteLine(line);
+ indent = true;
+ }
+ }
+
+ bool WriteOptionPrototype(TextWriter o, Option p, ref int written)
+ {
+ string[] names = p.Names;
+
+ int i = GetNextOptionIndex(names, 0);
+ if (i == names.Length)
+ return false;
+
+ if (names[i].Length == 1)
+ {
+ Write(o, ref written, " -");
+ Write(o, ref written, names[0]);
+ }
+ else
+ {
+ Write(o, ref written, " --");
+ Write(o, ref written, names[0]);
+ }
+
+ for (i = GetNextOptionIndex(names, i + 1);
+ i < names.Length; i = GetNextOptionIndex(names, i + 1))
+ {
+ Write(o, ref written, ", ");
+ Write(o, ref written, names[i].Length == 1 ? "-" : "--");
+ Write(o, ref written, names[i]);
+ }
+
+ if (p.OptionValueType == OptionValueType.Optional ||
+ p.OptionValueType == OptionValueType.Required)
+ {
+ if (p.OptionValueType == OptionValueType.Optional)
+ {
+ Write(o, ref written, localizer("["));
+ }
+ Write(o, ref written, localizer("=" + GetArgumentName(0, p.MaxValueCount, p.Description)));
+ string sep = p.ValueSeparators != null && p.ValueSeparators.Length > 0
+ ? p.ValueSeparators[0]
+ : " ";
+ for (int c = 1; c < p.MaxValueCount; ++c)
+ {
+ Write(o, ref written, localizer(sep + GetArgumentName(c, p.MaxValueCount, p.Description)));
+ }
+ if (p.OptionValueType == OptionValueType.Optional)
+ {
+ Write(o, ref written, localizer("]"));
+ }
+ }
+ return true;
+ }
+
+ static int GetNextOptionIndex(string[] names, int i)
+ {
+ while (i < names.Length && names[i] == "<>")
+ {
+ ++i;
+ }
+ return i;
+ }
+
+ static void Write(TextWriter o, ref int n, string s)
+ {
+ n += s.Length;
+ o.Write(s);
+ }
+
+ private static string GetArgumentName(int index, int maxIndex, string description)
+ {
+ if (description == null)
+ return maxIndex == 1 ? "VALUE" : "VALUE" + (index + 1);
+ string[] nameStart;
+ if (maxIndex == 1)
+ nameStart = new string[] { "{0:", "{" };
+ else
+ nameStart = new string[] { "{" + index + ":" };
+ for (int i = 0; i < nameStart.Length; ++i)
+ {
+ int start, j = 0;
+ do
+ {
+ start = description.IndexOf(nameStart[i], j);
+ } while (start >= 0 && j != 0 ? description[j++ - 1] == '{' : false);
+ if (start == -1)
+ continue;
+ int end = description.IndexOf("}", start);
+ if (end == -1)
+ continue;
+ return description.Substring(start + nameStart[i].Length, end - start - nameStart[i].Length);
+ }
+ return maxIndex == 1 ? "VALUE" : "VALUE" + (index + 1);
+ }
+
+ private static string GetDescription(string description)
+ {
+ if (description == null)
+ return string.Empty;
+ StringBuilder sb = new StringBuilder(description.Length);
+ int start = -1;
+ for (int i = 0; i < description.Length; ++i)
+ {
+ switch (description[i])
+ {
+ case '{':
+ if (i == start)
+ {
+ sb.Append('{');
+ start = -1;
+ }
+ else if (start < 0)
+ start = i + 1;
+ break;
+ case '}':
+ if (start < 0)
+ {
+ if ((i + 1) == description.Length || description[i + 1] != '}')
+ throw new InvalidOperationException("Invalid option description: " + description);
+ ++i;
+ sb.Append("}");
+ }
+ else
+ {
+ sb.Append(description.Substring(start, i - start));
+ start = -1;
+ }
+ break;
+ case ':':
+ if (start < 0)
+ goto default;
+ start = i + 1;
+ break;
+ default:
+ if (start < 0)
+ sb.Append(description[i]);
+ break;
+ }
+ }
+ return sb.ToString();
+ }
+
+ private static IEnumerable GetLines(string description, int firstWidth, int remWidth)
+ {
+ return StringCoda.WrappedLines(description, firstWidth, remWidth);
+ }
+ }
+
+}
+
diff --git a/Src/PE Dump/PE Dump.csproj b/Src/PE Dump/PE Dump.csproj
new file mode 100644
index 0000000..b833498
--- /dev/null
+++ b/Src/PE Dump/PE Dump.csproj
@@ -0,0 +1,72 @@
+
+
+
+
+ Debug
+ AnyCPU
+ {3A01212E-8461-41A0-B154-22CBA75929A3}
+ Exe
+ Properties
+ Workshell.PE.Dump
+ pedump
+ v4.0
+ 512
+
+
+
+ AnyCPU
+ true
+ full
+ false
+ ..\..\Bin\Debug\
+ DEBUG;TRACE
+ prompt
+ 4
+
+
+ AnyCPU
+ pdbonly
+ true
+ ..\..\Bin\Release\
+ TRACE
+ prompt
+ 4
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {2b06cbf8-136a-4bec-8624-861992139489}
+ Workshell.PE.Resources
+
+
+ {2e173d25-1c2e-4a7b-8b37-d231324d372d}
+ Workshell.PE
+
+
+
+
+
\ No newline at end of file
diff --git a/Src/PE Dump/Program.cs b/Src/PE Dump/Program.cs
new file mode 100644
index 0000000..625e139
--- /dev/null
+++ b/Src/PE Dump/Program.cs
@@ -0,0 +1,267 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+using Mono.Options;
+using Workshell.PE;
+using Workshell.PE.Annotations;
+
+namespace Workshell.PE.Dump
+{
+
+ class Program
+ {
+
+ private OptionSet options;
+ private string address_type;
+ private bool show_all;
+ private bool show_dos_header;
+ private bool show_dos_stub;
+
+ public Program()
+ {
+ options = new OptionSet();
+
+ options.Add("address=", "", v => address_type = v);
+ options.Add("all", "", v => show_all = v != null);
+ options.Add("dos-header", "", v => show_dos_header = v != null);
+ options.Add("dos-stub", "", v => show_dos_stub = v != null);
+
+ address_type = "fo";
+ show_all = false;
+ show_dos_header = false;
+ show_dos_stub = false;
+ }
+
+ #region Static Methods
+
+ static int Main(string[] args)
+ {
+ return (new Program()).Run(args);
+ }
+
+ #endregion
+
+ #region Methods
+
+ public int Run(string[] args)
+ {
+ try
+ {
+ if (args.Length == 0)
+ {
+ Usage();
+
+ return 1;
+ }
+
+ List extra = options.Parse(args);
+
+ if (extra.Count == 0)
+ {
+ Console.WriteLine("Error: No file specified.");
+
+ return 2;
+ }
+
+ string[] address_types = { "fo", "vo", "va", "rva" };
+
+ if (!address_types.Contains(address_type, StringComparer.OrdinalIgnoreCase))
+ {
+ Console.WriteLine("Error: Unknown address type - " + address_type);
+
+ return 3;
+ }
+
+ string file_name = extra[0];
+ string valid_message = null;
+
+ if (!ExecutableImage.IsValid(file_name, out valid_message))
+ {
+ Console.WriteLine("Error: {0}", valid_message);
+
+ return 4;
+ }
+
+ ExecutableImage image = ExecutableImage.FromFile(file_name);
+
+ try
+ {
+ if (show_all)
+ {
+ show_dos_header = true;
+ show_dos_stub = true;
+ }
+
+ int result = ShowBasicDetails(image, file_name);
+
+ if (result == 0 && show_dos_header)
+ result = ShowDOSHeader(image);
+
+ if (result == 0 && show_dos_stub)
+ result = ShowDOSStub(image);
+
+ return result;
+ }
+ finally
+ {
+ image.Dispose();
+ }
+ }
+ catch (Exception ex)
+ {
+#if DEBUG
+ throw;
+#else
+ Console.WriteLine("Error: {0}", ex.Message);
+
+ return 666;
+#endif
+ }
+ }
+
+ private void Usage()
+ {
+
+ }
+
+ private int ShowBasicDetails(ExecutableImage image, string fileName)
+ {
+ Stream stream = image.GetStream();
+ string image_type = "Unknown";
+ CharacteristicsType characteristics = image.NTHeaders.FileHeader.GetCharacteristics();
+
+ if ((characteristics & CharacteristicsType.IsDLL) == CharacteristicsType.IsDLL)
+ {
+ image_type = "Dynamic Link Library";
+ }
+ else
+ {
+ SubSystemType sub_system = image.NTHeaders.OptionalHeader.GetSubsystem();
+
+ if (sub_system == SubSystemType.WindowsCUI)
+ {
+ image_type = "Console Application";
+ }
+ else if (sub_system == SubSystemType.WindowsGUI)
+ {
+ image_type = "Windows Application";
+ }
+ }
+
+ Console.WriteLine("[ Basic Details ]");
+ Console.WriteLine();
+
+ Console.WriteLine(" Filename: {0}", Path.GetFileName(fileName));
+ Console.WriteLine(" Path: {0}", Path.GetDirectoryName(fileName));
+ Console.WriteLine(" Size: {1} ({0})", Utils.FormatBytes(stream.Length), stream.Length);
+ Console.WriteLine(" Architecture: {0}", (image.Is64Bit ? "64-Bit" : "32-Bit"));
+ Console.WriteLine(" Image Type: {0}", image_type);
+ Console.WriteLine(" Is .NET: {0}", (image.IsCLR ? "Yes" : "No"));
+ Console.WriteLine(" Is Signed: {0}", (image.IsSigned ? "Yes" : "No"));
+
+ Console.WriteLine();
+ Console.WriteLine();
+
+ return 0;
+ }
+
+ private int ShowDOSHeader(ExecutableImage image)
+ {
+ Console.WriteLine("[ MS-DOS Header ]");
+ Console.WriteLine();
+
+ Console.WriteLine(" File Offset: {0}", Utils.IntToHex(image.DOSHeader.Location.FileOffset));
+ Console.WriteLine(" Virtual Address: {0}", Utils.IntToHex(image.DOSHeader.Location.VirtualAddress));
+ Console.WriteLine(" RVA: {0}", Utils.IntToHex(image.DOSHeader.Location.RelativeVirtualAddress));
+ Console.WriteLine(" Size: {1} ({0})", Utils.FormatBytes(Convert.ToInt64(image.DOSHeader.Location.FileSize)), image.DOSHeader.Location.FileSize);
+
+ Console.WriteLine();
+
+ List> tuples = new List>();
+ ulong offset;
+
+ if (address_type == "fo")
+ {
+ offset = image.DOSHeader.Location.FileOffset;
+ }
+ else if (address_type == "vo")
+ {
+ offset = 0;
+ }
+ else if (address_type == "va")
+ {
+ offset = image.DOSHeader.Location.VirtualAddress;
+ }
+ else
+ {
+ offset = image.DOSHeader.Location.RelativeVirtualAddress;
+ }
+
+ int address_size = (image.Is64Bit ? 16 : 8);
+
+ FieldAnnotations annotations = FieldAnnotations.Get(image.DOSHeader);
+
+ foreach (FieldAnnotation annotation in annotations)
+ {
+ int size = annotation.Size;
+ int array_size = (annotation.IsArray ? annotation.ArraySize : annotation.Size);
+ object value = (annotation.IsArray ? Utils.GetDefaultValue(annotation.Type.GetElementType()) : annotation.Value);
+
+ Tuple tuple = new Tuple(Utils.IntToHex(offset, address_size), Utils.IntToHex(value, size * 2), annotation.Description);
+
+ tuples.Add(tuple);
+
+ offset += Convert.ToUInt32(array_size);
+ }
+
+ int max_value_len = 0;
+ int max_desc_len = 0;
+
+ foreach(var tuple in tuples)
+ {
+ if (tuple.Item2.Length > max_value_len)
+ max_value_len = tuple.Item2.Length;
+
+ if (tuple.Item3.Length > max_desc_len)
+ max_desc_len = tuple.Item3.Length;
+ }
+
+ string header = String.Format("{0} {1} {2}", "Address".PadRight(address_size + 2), "Value".PadRight(max_value_len), "Description".PadRight(max_desc_len));
+
+ Console.WriteLine(" " + header);
+ Console.WriteLine(" " + String.Empty.PadRight(header.Length, '-'));
+
+ foreach (var tuple in tuples)
+ Console.WriteLine(" {0} {1} {2}", tuple.Item1.PadRight(address_size + 2), tuple.Item2.PadRight(max_value_len), tuple.Item3.PadRight(max_desc_len));
+
+ Console.WriteLine();
+ Console.WriteLine();
+
+ return 0;
+ }
+
+ private int ShowDOSStub(ExecutableImage image)
+ {
+ Console.WriteLine("[ MS-DOS Stub ]");
+ Console.WriteLine();
+
+ Console.WriteLine(" File Offset: {0}", Utils.IntToHex(image.DOSStub.Location.FileOffset));
+ Console.WriteLine(" Virtual Address: {0}", Utils.IntToHex(image.DOSStub.Location.VirtualAddress));
+ Console.WriteLine(" RVA: {0}", Utils.IntToHex(image.DOSStub.Location.RelativeVirtualAddress));
+ Console.WriteLine(" Size: {1} ({0})", Utils.FormatBytes(Convert.ToInt64(image.DOSStub.Location.FileSize)), image.DOSStub.Location.FileSize);
+
+ Console.WriteLine();
+ Console.WriteLine();
+
+ return 0;
+ }
+
+ #endregion
+
+ }
+
+}
diff --git a/Src/PE Dump/Properties/AssemblyInfo.cs b/Src/PE Dump/Properties/AssemblyInfo.cs
new file mode 100644
index 0000000..70ef2ff
--- /dev/null
+++ b/Src/PE Dump/Properties/AssemblyInfo.cs
@@ -0,0 +1,36 @@
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+
+// General Information about an assembly is controlled through the following
+// set of attributes. Change these attribute values to modify the information
+// associated with an assembly.
+[assembly: AssemblyTitle("PE Dump")]
+[assembly: AssemblyDescription("A console application to view and dump information about a Portable Executable.")]
+[assembly: AssemblyConfiguration("")]
+[assembly: AssemblyCompany("Workshell Ltd")]
+[assembly: AssemblyProduct("PE Dump")]
+[assembly: AssemblyCopyright("Copyright ©2016 Workshell Ltd")]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyCulture("")]
+
+// Setting ComVisible to false makes the types in this assembly not visible
+// to COM components. If you need to access a type in this assembly from
+// COM, set the ComVisible attribute to true on that type.
+[assembly: ComVisible(false)]
+
+// The following GUID is for the ID of the typelib if this project is exposed to COM
+[assembly: Guid("3a01212e-8461-41a0-b154-22cba75929a3")]
+
+// Version information for an assembly consists of the following four values:
+//
+// Major Version
+// Minor Version
+// Build Number
+// Revision
+//
+// You can specify all the values or you can default the Build and Revision Numbers
+// by using the '*' as shown below:
+// [assembly: AssemblyVersion("1.0.*")]
+[assembly: AssemblyVersion("1.4.*")]
+[assembly: AssemblyInformationalVersion("1.4.0")]
diff --git a/Src/PE Dump/Utils.cs b/Src/PE Dump/Utils.cs
new file mode 100644
index 0000000..f1a6b80
--- /dev/null
+++ b/Src/PE Dump/Utils.cs
@@ -0,0 +1,183 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+
+namespace Workshell.PE.Dump
+{
+
+ public enum NumberStyle : int
+ {
+ Decimal,
+ Hexadecimal
+ }
+
+ internal class Utils
+ {
+
+ public static bool IsNumeric(object value)
+ {
+ switch (Type.GetTypeCode(value.GetType()))
+ {
+ case TypeCode.Byte:
+ case TypeCode.SByte:
+ case TypeCode.UInt16:
+ case TypeCode.Int16:
+ case TypeCode.UInt32:
+ case TypeCode.Int32:
+ case TypeCode.UInt64:
+ case TypeCode.Int64:
+ case TypeCode.Single:
+ case TypeCode.Double:
+ case TypeCode.Decimal:
+ return true;
+ default:
+ return false;
+ }
+ }
+
+ public static string IntToHex(object value)
+ {
+ switch (Type.GetTypeCode(value.GetType()))
+ {
+ case TypeCode.Byte: return IntToHex(value, 2);
+ case TypeCode.SByte: return IntToHex(value, 2);
+ case TypeCode.UInt16: return IntToHex(value, 4);
+ case TypeCode.Int16: return IntToHex(value, 4);
+ case TypeCode.UInt32: return IntToHex(value, 8);
+ case TypeCode.Int32: return IntToHex(value, 8);
+ case TypeCode.UInt64: return IntToHex(value, 16);
+ case TypeCode.Int64: return IntToHex(value, 16);
+ default:
+ throw new FormatException("Unknown integer value type.");
+ }
+ }
+
+ public static string IntToHex(object value, int size)
+ {
+ string result = String.Empty;
+
+ switch (Type.GetTypeCode(value.GetType()))
+ {
+ case TypeCode.Byte:
+ result = "0x" + ((byte)(value)).ToString("X" + size);
+ break;
+ case TypeCode.SByte:
+ result = "0x" + ((sbyte)(value)).ToString("X" + size);
+ break;
+ case TypeCode.UInt16:
+ result = "0x" + ((ushort)(value)).ToString("X" + size);
+ break;
+ case TypeCode.Int16:
+ result = "0x" + ((short)(value)).ToString("X" + size);
+ break;
+ case TypeCode.UInt32:
+ result = "0x" + ((uint)(value)).ToString("X" + size);
+ break;
+ case TypeCode.Int32:
+ result = "0x" + ((int)(value)).ToString("X" + size);
+ break;
+ case TypeCode.UInt64:
+ result = "0x" + ((ulong)(value)).ToString("X" + size);
+ break;
+ case TypeCode.Int64:
+ result = "0x" + ((long)(value)).ToString("X" + size);
+ break;
+ default:
+ throw new FormatException("Unknown integer value type.");
+ }
+
+ return result;
+ }
+
+ public static string FormatNumber(object value, NumberStyle numberStyle)
+ {
+ if (!IsNumeric(value))
+ throw new FormatException("Unknown numeric value type.");
+
+ if (numberStyle == NumberStyle.Decimal)
+ {
+ return value.ToString();
+ }
+ else
+ {
+ return IntToHex(value);
+ }
+ }
+
+ public static string FormatNumber(object value, NumberStyle numberStyle, int size)
+ {
+ if (!IsNumeric(value))
+ throw new FormatException("Unknown numeric value type.");
+
+ string result = String.Empty;
+
+ if (numberStyle == NumberStyle.Decimal)
+ {
+ switch (Type.GetTypeCode(value.GetType()))
+ {
+ case TypeCode.Byte:
+ result = ((byte)(value)).ToString("D" + size);
+ break;
+ case TypeCode.SByte:
+ result = ((sbyte)(value)).ToString("D" + size);
+ break;
+ case TypeCode.UInt16:
+ result = ((ushort)(value)).ToString("D" + size);
+ break;
+ case TypeCode.Int16:
+ result = ((short)(value)).ToString("D" + size);
+ break;
+ case TypeCode.UInt32:
+ result = ((uint)(value)).ToString("D" + size);
+ break;
+ case TypeCode.Int32:
+ result = ((int)(value)).ToString("D" + size);
+ break;
+ case TypeCode.UInt64:
+ result = ((ulong)(value)).ToString("D" + size);
+ break;
+ case TypeCode.Int64:
+ result = ((long)(value)).ToString("D" + size);
+ break;
+ default:
+ throw new FormatException("Unknown integer value type.");
+ }
+ }
+ else
+ {
+ result = IntToHex(value, size);
+ }
+
+ return result;
+ }
+
+ public static object GetDefaultValue(Type type)
+ {
+ if (type.IsValueType)
+ {
+ return Activator.CreateInstance(type);
+ }
+ else
+ {
+ return null;
+ }
+ }
+
+ private static readonly string[] suf = { "Bytes", "KB", "MB", "GB", "TB", "PB", "EB" };
+
+ public static string FormatBytes(long byteCount)
+ {
+ if (byteCount == 0)
+ return "0 B";
+
+ long bytes = Math.Abs(byteCount);
+ int place = Convert.ToInt32(Math.Floor(Math.Log(bytes, 1024)));
+ double num = Math.Round(bytes / Math.Pow(1024, place), 1);
+
+ return String.Format("{0} {1}", (Math.Sign(byteCount) * num), suf[place]);
+ }
+
+ }
+
+}
diff --git a/Src/Workshell.PE/ExecutableImage.cs b/Src/Workshell.PE/ExecutableImage.cs
index 6f7c9af..98070f2 100644
--- a/Src/Workshell.PE/ExecutableImage.cs
+++ b/Src/Workshell.PE/ExecutableImage.cs
@@ -308,7 +308,7 @@ private static PreloadedInformation TryPreload(Stream stream, out string errorMe
bool is_clr = false;
int clr_dir_index = (int)DataDirectoryType.CLRRuntimeHeader;
- if (clr_dir_index < 0 || clr_dir_index > (data_directories.Length - 1))
+ if (clr_dir_index >= 0 && clr_dir_index <= (data_directories.Length - 1))
{
IMAGE_DATA_DIRECTORY clr_dir = data_directories[clr_dir_index];
@@ -319,7 +319,7 @@ private static PreloadedInformation TryPreload(Stream stream, out string errorMe
bool is_signed = false;
int cert_dir_index = (int)DataDirectoryType.CertificateTable;
- if (cert_dir_index < 0 || cert_dir_index > (data_directories.Length - 1))
+ if (cert_dir_index >= 0 && cert_dir_index <= (data_directories.Length - 1))
{
IMAGE_DATA_DIRECTORY cert_dir = data_directories[cert_dir_index];
diff --git a/Src/dotNET PE.2015.sln b/Src/dotNET PE.2015.sln
index b76b4c1..b27d2ff 100644
--- a/Src/dotNET PE.2015.sln
+++ b/Src/dotNET PE.2015.sln
@@ -13,6 +13,8 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Debug Application", "Debug
{2B06CBF8-136A-4BEC-8624-861992139489} = {2B06CBF8-136A-4BEC-8624-861992139489}
EndProjectSection
EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "PE Dump", "PE Dump\PE Dump.csproj", "{3A01212E-8461-41A0-B154-22CBA75929A3}"
+EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
@@ -31,6 +33,10 @@ Global
{BE0852C4-A347-4E12-84C3-550AE6E5636F}.Debug|Any CPU.Build.0 = Debug|Any CPU
{BE0852C4-A347-4E12-84C3-550AE6E5636F}.Release|Any CPU.ActiveCfg = Release|Any CPU
{BE0852C4-A347-4E12-84C3-550AE6E5636F}.Release|Any CPU.Build.0 = Release|Any CPU
+ {3A01212E-8461-41A0-B154-22CBA75929A3}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+ {3A01212E-8461-41A0-B154-22CBA75929A3}.Debug|Any CPU.Build.0 = Debug|Any CPU
+ {3A01212E-8461-41A0-B154-22CBA75929A3}.Release|Any CPU.ActiveCfg = Release|Any CPU
+ {3A01212E-8461-41A0-B154-22CBA75929A3}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE