0
mirror of https://github.com/sampletext32/ParkanPlayground.git synced 2025-05-19 11:51:17 +03:00

142 lines
5.5 KiB
C#
Raw Normal View History

using System;
using System.IO;
using System.Text;
using System.Collections.Generic;
using X86Disassembler.PE;
using X86Disassembler.X86;
namespace X86Disassembler;
/// <summary>
/// Main program class
/// </summary>
public class Program
2025-04-12 16:42:44 +03:00
{
// Hardcoded file path for testing
private const string FilePath = @"C:\Program Files (x86)\Nikita\Iron Strategy\Terrain.dll";
/// <summary>
/// Main entry point
/// </summary>
/// <param name="args">Command line arguments</param>
public static void Main(string[] args)
{
Console.WriteLine("X86 Disassembler and Decompiler");
Console.WriteLine("--------------------------------");
// Load the file
Console.WriteLine($"Loading file: {FilePath}");
byte[] fileBytes = File.ReadAllBytes(FilePath);
Console.WriteLine($"Successfully loaded {FilePath}");
Console.WriteLine($"File size: {fileBytes.Length} bytes\n");
// Parse the PE format
Console.WriteLine("Parsing PE format...\n");
PEFormat peFormat = new PEFormat(fileBytes);
peFormat.Parse();
// Print PE file information
Console.WriteLine("PE File Information:");
Console.WriteLine($"Architecture: {(peFormat.OptionalHeader.Is64Bit() ? "64-bit" : "32-bit")}");
Console.WriteLine($"Entry Point: 0x{peFormat.OptionalHeader.AddressOfEntryPoint:X8}");
Console.WriteLine($"Image Base: 0x{peFormat.OptionalHeader.ImageBase:X8}");
Console.WriteLine($"Number of Sections: {peFormat.FileHeader.NumberOfSections}");
Console.WriteLine();
// Print section information
Console.WriteLine("Sections:");
foreach (var section in peFormat.SectionHeaders)
{
string flags = "";
if (section.ContainsCode()) flags += "Code ";
if (section.IsExecutable()) flags += "Exec ";
if (section.IsReadable()) flags += "Read ";
if (section.IsWritable()) flags += "Write";
2025-04-12 16:42:44 +03:00
Console.WriteLine($" {peFormat.SectionHeaders.IndexOf(section)}: {section.Name,-8} VA=0x{section.VirtualAddress:X8} Size={section.VirtualSize,-8} [{flags}]");
}
Console.WriteLine();
// Print export information
if (peFormat.ExportDirectory != null)
{
Console.WriteLine("Exported Functions:");
Console.WriteLine($"DLL Name: {peFormat.ExportDirectory.DllName}");
Console.WriteLine($"Number of Functions: {peFormat.ExportDirectory.NumberOfFunctions}");
Console.WriteLine($"Number of Names: {peFormat.ExportDirectory.NumberOfNames}");
2025-04-12 16:42:44 +03:00
for (int i = 0; i < peFormat.ExportedFunctions.Count; i++)
{
var export = peFormat.ExportedFunctions[i];
Console.WriteLine($" {i}: {export.Name} (Ordinal={export.Ordinal}, RVA=0x{export.AddressRva:X8})");
}
Console.WriteLine();
}
// Print import information
if (peFormat.ImportDescriptors.Count > 0)
{
Console.WriteLine("Imported Functions:");
Console.WriteLine($"Number of Imported DLLs: {peFormat.ImportDescriptors.Count}");
foreach (var import in peFormat.ImportDescriptors)
{
Console.WriteLine($" DLL: {import.DllName}");
2025-04-12 16:42:44 +03:00
for (int i = 0; i < import.Functions.Count; i++)
{
var function = import.Functions[i];
if (function.IsOrdinal)
{
Console.WriteLine($" {i}: Ordinal {function.Ordinal}");
}
else
{
Console.WriteLine($" {i}: {function.Name} (Hint={function.Hint})");
}
}
}
Console.WriteLine();
2025-04-12 16:42:44 +03:00
}
// Find code sections
var codeSections = peFormat.SectionHeaders.FindAll(s => s.ContainsCode());
Console.WriteLine($"Found {codeSections.Count} code section(s):");
foreach (var section in codeSections)
2025-04-12 16:42:44 +03:00
{
Console.WriteLine($" - {section.Name}: Size={section.VirtualSize} bytes, RVA=0x{section.VirtualAddress:X8}");
2025-04-12 16:42:44 +03:00
}
Console.WriteLine();
2025-04-12 16:42:44 +03:00
// Disassemble the first code section
if (codeSections.Count > 0)
2025-04-12 16:42:44 +03:00
{
var section = codeSections[0];
byte[] codeBytes = peFormat.GetSectionData(peFormat.SectionHeaders.IndexOf(section));
2025-04-12 16:42:44 +03:00
Console.WriteLine($"Disassembling section {section.Name} at RVA 0x{section.VirtualAddress:X8}:");
2025-04-12 16:42:44 +03:00
// Create a disassembler for the code section
Disassembler disassembler = new Disassembler(codeBytes, section.VirtualAddress);
2025-04-12 16:42:44 +03:00
// Disassemble all instructions
var instructions = disassembler.Disassemble();
// Print the first 100 instructions
int count = Math.Min(100, instructions.Count);
for (int i = 0; i < count; i++)
{
Console.WriteLine(instructions[i]);
}
// Print a summary of how many more instructions there are
if (instructions.Count > count)
{
Console.WriteLine($"... ({instructions.Count - count} more bytes not shown)");
}
2025-04-12 16:42:44 +03:00
}
Console.WriteLine("\nPress Enter to exit...");
Console.ReadLine();
2025-04-12 16:42:44 +03:00
}
}