Cracked5pider-LdrLibraryEx/tests/TestCryptsp.c

#include <LdrLibraryEx.h>
#include <stdio.h>

VOID PrintBytes(
    _In_ LPSTR    Name,
    _In_ PCSTRING Data
);

BOOL MapCryptSp(
    VOID
);

int wmain(
    int       argc,
    wchar_t** argv
) {
    printf( "press enter to start..." );
    getchar();

    //
    // map and test against advapi32.dll
    //
    puts( "[*] trying to load cryptsp.dll" );
    if ( ! MapCryptSp() ) {
        puts( "[-] failed to load & test cryptsp.dll" );
    }
    puts( "[*] finished" );

    return 0;
}

/*!
 * @brief
 *  load cryptsp into memory and test some functions
 *
 * @return
 */
BOOL MapCryptSp(
    VOID
) {
    BOOL     Success = { 0 };
    NTSTATUS Status  = { 0 };
    PVOID    Module  = { 0 };
    ULONG    Flags   = { 0 };
    PVOID    Sys32   = { 0 };
    CSTRING  CKey    = { 0 };
    CSTRING  CDat    = { 0 };
    CHAR     Dat[]   = { 0x01, 0x01, 0x01, 0x01 };
    CHAR     Key[]   = { 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55 };

    //
    // mapping flags to be used by the library
    //
    Flags = LIBRARYEX_BYPASS_LOAD_CALLBACK |
            LIBRARYEX_NO_ENTRY;

    //
    // map file into memory
    //
    if ( ! NT_SUCCESS( Status = LdrLibrary(
        L"cryptsp.dll",
        &Module,
        Flags
    ) ) ) {
        printf( "[-] LdrLibraryEx Failed: %p\n", Status );
        goto END;
    }

    //
    // test functions
    //
    if ( ( Sys32 = LdrFunction( Module, "SystemFunction032" ) ) ) {

        CKey.Length = CKey.MaximumLength = sizeof( Key );
        CKey.Buffer = Key;

        CDat.Length = CKey.MaximumLength = sizeof( Dat );
        CDat.Buffer = Dat;

        PrintBytes( "Data", &CDat );

        ( ( NTSTATUS( * ) ( PCSTRING, PCSTRING ) ) Sys32 )( &CDat, &CKey );
        PrintBytes( "Data", &CDat );
        ( ( NTSTATUS( * ) ( PCSTRING, PCSTRING ) ) Sys32 )( &CDat, &CKey );

        PrintBytes( "Data", &CDat );

    } else puts( "[-] Failed to load SystemFunction032" );

    printf( "[*] Module @ %p\n", Module );

    Success = TRUE;

END:
    return Success;
}

VOID PrintBytes(
    _In_ LPSTR    Name,
    _In_ PCSTRING Data
) {
    printf( "[*] %s :: [ ", Name );

    for ( USHORT i = 0; i < Data->Length; i++ ) {
        printf( "%x " , Data->Buffer[ i ] );
    }

    puts( "]" );
}