Method GetSectionAddress

Process/Process.cpp:324–375

GetSectionAddress - Get the address of a named section of the module with the named `moduleName` returns a memory address of the section if found, and 0 if no section is found or an error occurs */

    returns a memory address of the section if found, and 0 if no section is found or an error occurs
*/
uintptr_t Process::GetSectionAddress(__in const char* moduleName, __in const  char* sectionName)
{
    if (moduleName == nullptr || sectionName == nullptr)
    {
        Logger::logf(Err, "module or section name pointers were null @ Process::GetSectionAddress");
        return 0;
    }

    HMODULE hModule = GetModuleHandleA(moduleName);

    if (hModule == NULL)
    {
        Logger::logf(Err, " Failed to get module handle: %d @ GetSectionAddress\n", GetLastError());
        return 0;
    }

    uintptr_t baseAddress = (uintptr_t)hModule;

    PIMAGE_DOS_HEADER pDosHeader = (PIMAGE_DOS_HEADER)baseAddress;
    if (pDosHeader->e_magic != IMAGE_DOS_SIGNATURE)
    {
        Logger::logf(Err, " Invalid DOS header @ GetSectionAddress.\n");
        return 0;
    }

    PIMAGE_NT_HEADERS pNtHeaders = (PIMAGE_NT_HEADERS)(baseAddress + pDosHeader->e_lfanew);
    if (pNtHeaders->Signature != IMAGE_NT_SIGNATURE)
    {
        Logger::logf(Err, " Invalid NT header @ GetSectionAddress.\n");
        return 0;
    }

    PIMAGE_SECTION_HEADER pSectionHeader = IMAGE_FIRST_SECTION(pNtHeaders);

    const int nSections = Process::GetNumSections();

    for (int i = 0; i < nSections; i++)  //we are modifying # of sections at runtime to throw attackers off
    {
        if ((const char*)pSectionHeader->Name != nullptr)
        {
            if (strcmp((const char*)pSectionHeader->Name, sectionName) == 0)
            {
                return (uintptr_t)(baseAddress + pSectionHeader->VirtualAddress);
            }
        }

        pSectionHeader++;
    }

    Logger::logf(Warning, ".text section not found.\n");
    return 0;
}

/*
    GetBytesAtAddress - return bytes from an address given `size`.