FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
MemoryModulePP/MemoryModulePP.h at master · strivexjun/MemoryModulePP · GitHub
strivexjun
/
MemoryModulePP
Public
Notifications
You must be signed in to change notification settings
Fork
98
Star
225
Code
Issues
4
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Expand file tree
Breadcrumbs
MemoryModulePP
/
MemoryModulePP.h
Copy path
More file actions
More file actions
Latest commit
History
History
History
181 lines (152 loc) · 4.67 KB
Breadcrumbs
MemoryModulePP
/
MemoryModulePP.h
Copy path
File metadata and controls
181 lines (152 loc) · 4.67 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
/*
* modify by xjun
*/
#ifndef
__MEMORY_MODULE_HEADER
#define
__MEMORY_MODULE_HEADER
#include
<windows.h>
typedef
void
*
HMEMORYRSRC
;
typedef
void
*
HCUSTOMMODULE
;
#ifdef
__cplusplus
extern
"C"
{
#endif
typedef
LPVOID
(
*
CustomAllocFunc
)(
LPVOID
,
SIZE_T
,
DWORD
,
DWORD
,
void
*
);
typedef
BOOL
(
*
CustomFreeFunc
)(
LPVOID
,
SIZE_T
,
DWORD
,
void
*
);
typedef
HCUSTOMMODULE
(
*
CustomLoadLibraryFunc
)(
LPCSTR
,
void
*
);
typedef
FARPROC
(
*
CustomGetProcAddressFunc
)(
HCUSTOMMODULE
,
LPCSTR
,
void
*
);
typedef
void
(
*
CustomFreeLibraryFunc
)(
HCUSTOMMODULE
,
void
*
);
struct
ExportNameEntry
{
LPCSTR
name
;
WORD
idx
;
};
typedef
BOOL
(
WINAPI
*
DllEntryProc
)(
HINSTANCE
hinstDLL
,
DWORD
fdwReason
,
LPVOID
lpReserved
);
typedef
int
(
WINAPI
*
ExeEntryProc
)(
void
);
typedef
struct
{
PIMAGE_NT_HEADERS
headers
;
unsigned
char
*
codeBase
;
HCUSTOMMODULE
*
modules
;
int
numModules
;
BOOL
initialized
;
BOOL
isDLL
;
BOOL
isRelocated
;
CustomAllocFunc
alloc
;
CustomFreeFunc
free
;
CustomLoadLibraryFunc
loadLibrary
;
CustomGetProcAddressFunc
getProcAddress
;
CustomFreeLibraryFunc
freeLibrary
;
struct
ExportNameEntry
*
nameExportsTable
;
void
*
userdata
;
ExeEntryProc
exeEntry
;
DWORD
pageSize
;
}
MEMORYMODULE
,
*
PMEMORYMODULE
;
typedef
struct
{
LPVOID
address
;
LPVOID
alignedAddress
;
SIZE_T
size
;
DWORD
characteristics
;
BOOL
last
;
}
SECTIONFINALIZEDATA
,
*
PSECTIONFINALIZEDATA
;
#define
GET_HEADER_DICTIONARY
(
module
,
idx
) &(module)->headers->OptionalHeader.DataDirectory[idx]
/**
* Load EXE/DLL from memory location with the given size.
*
* All dependencies are resolved using default LoadLibrary/GetProcAddress
* calls through the Windows API.
*/
PMEMORYMODULE
MemoryLoadLibrary
(
const
void
*
,
size_t
);
/**
* Load EXE/DLL from memory location with the given size using custom dependency
* resolvers.
*
* Dependencies will be resolved using passed callback methods.
*/
PMEMORYMODULE
MemoryLoadLibraryEx
(
const
void
*
,
size_t
,
CustomAllocFunc
,
CustomFreeFunc
,
CustomLoadLibraryFunc
,
CustomGetProcAddressFunc
,
CustomFreeLibraryFunc
,
void
*
);
/**
* Get address of exported method. Supports loading both by name and by
* ordinal value.
*/
FARPROC
MemoryGetProcAddress
(
PMEMORYMODULE
,
LPCSTR
);
/**
* Free previously loaded EXE/DLL.
*/
void
MemoryFreeLibrary
(
PMEMORYMODULE
);
/**
* Execute entry point (EXE only). The entry point can only be executed
* if the EXE has been loaded to the correct base address or it could
* be relocated (i.e. relocation information have not been stripped by
* the linker).
*
* Important: calling this function will not return, i.e. once the loaded
* EXE finished running, the process will terminate.
*
* Returns a negative value if the entry point could not be executed.
*/
int
MemoryCallEntryPoint
(
PMEMORYMODULE
);
/**
* Find the location of a resource with the specified type and name.
*/
HMEMORYRSRC
MemoryFindResource
(
PMEMORYMODULE
,
LPCTSTR
,
LPCTSTR
);
/**
* Find the location of a resource with the specified type, name and language.
*/
HMEMORYRSRC
MemoryFindResourceEx
(
PMEMORYMODULE
,
LPCTSTR
,
LPCTSTR
,
WORD
);
/**
* Get the size of the resource in bytes.
*/
DWORD
MemorySizeofResource
(
PMEMORYMODULE
,
HMEMORYRSRC
);
/**
* Get a pointer to the contents of the resource.
*/
LPVOID
MemoryLoadResource
(
PMEMORYMODULE
,
HMEMORYRSRC
);
/**
* Load a string resource.
*/
int
MemoryLoadString
(
PMEMORYMODULE
,
UINT
,
LPTSTR
,
int
);
/**
* Load a string resource with a given language.
*/
int
MemoryLoadStringEx
(
PMEMORYMODULE
,
UINT
,
LPTSTR
,
int
,
WORD
);
/**
* Default implementation of CustomAllocFunc that calls VirtualAlloc
* internally to allocate memory for a library
*
* This is the default as used by MemoryLoadLibrary.
*/
LPVOID
MemoryDefaultAlloc
(
LPVOID
,
SIZE_T
,
DWORD
,
DWORD
,
void
*
);
/**
* Default implementation of CustomFreeFunc that calls VirtualFree
* internally to free the memory used by a library
*
* This is the default as used by MemoryLoadLibrary.
*/
BOOL
MemoryDefaultFree
(
LPVOID
,
SIZE_T
,
DWORD
,
void
*
);
/**
* Default implementation of CustomLoadLibraryFunc that calls LoadLibraryA
* internally to load an additional libary.
*
* This is the default as used by MemoryLoadLibrary.
*/
HCUSTOMMODULE
MemoryDefaultLoadLibrary
(
LPCSTR
,
void
*
);
/**
* Default implementation of CustomGetProcAddressFunc that calls GetProcAddress
* internally to get the address of an exported function.
*
* This is the default as used by MemoryLoadLibrary.
*/
FARPROC
MemoryDefaultGetProcAddress
(
HCUSTOMMODULE
,
LPCSTR
,
void
*
);
/**
* Default implementation of CustomFreeLibraryFunc that calls FreeLibrary
* internally to release an additional libary.
*
* This is the default as used by MemoryLoadLibrary.
*/
void
MemoryDefaultFreeLibrary
(
HCUSTOMMODULE
,
void
*
);
#ifdef
__cplusplus
}
#endif
#endif
// __MEMORY_MODULE_HEADER
Back
|
FazBrowse Home
|
New Git URL