admin/bb107-MemoryModulePP
1
0
Fork 0
mirror of https://github.com/bb107/MemoryModulePP synced 2026-06-08 13:15:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

add MmpTls.cpp

Browse Source
This commit is contained in:
Boring
2021-06-02 22:45:25 +08:00
parent ae8b8368d0
commit 41c1175add
23 changed files with 14752 additions and 118 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/test.cpp
+14 -101
View File
@@ -18,114 +18,27 @@ static PVOID ReadDllFile(LPCSTR FileName) {
return buffer;
}
int test_default() {
LPVOID buffer = ReadDllFile("a.dll");
VOID NTAPI MmpInitialize();
DWORD NTAPI Thread(PVOID) {
HMEMORYMODULE m1 = nullptr, m2 = m1;
HMODULE hModule = nullptr;
FARPROC pfn = nullptr;
DWORD MemoryModuleFeatures = 0;
typedef int(* _exception)(int code);
_exception exception = nullptr;
HRSRC hRsrc;
DWORD SizeofRes;
HGLOBAL gRes;
char str[10];
LdrQuerySystemMemoryModuleFeatures(&MemoryModuleFeatures);
if (MemoryModuleFeatures != MEMORY_FEATURE_ALL) {
printf("not support all features on this version of windows.\n");
}
if (!NT_SUCCESS(LdrLoadDllMemoryExW(&m1, nullptr, 0, buffer, 0, L"kernel64", nullptr))) goto end;
LoadLibraryW(L"wininet.dll");
if (!NT_SUCCESS(LdrLoadDllMemoryExW(&m2, nullptr, 0, buffer, 0, L"kernel128", nullptr))) goto end;
//forward export
hModule = (HMODULE)m1;
pfn = (decltype(pfn))(GetProcAddress(hModule, "Socket")); //ws2_32.WSASocketW
pfn = (decltype(pfn))(GetProcAddress(hModule, "VerifyTruse")); //wintrust.WinVerifyTrust
hModule = (HMODULE)m2;
pfn = (decltype(pfn))(GetProcAddress(hModule, "Socket"));
pfn = (decltype(pfn))(GetProcAddress(hModule, "VerifyTruse"));
//exception
hModule = (HMODULE)m1;
exception = (_exception)GetProcAddress(hModule, "exception");
if (exception) {
for (int i = 0; i < 4; ++i)exception(i);
}
//tls
pfn = GetProcAddress(hModule, "thread");
if (pfn && pfn()) {
printf("thread test failed.\n");
}
//resource
if (!LoadStringA(hModule, 101, str, 10)) {
printf("load string failed.\n");
}
else {
printf("%s\n", str);
}
if (!(hRsrc = FindResourceA(hModule, MAKEINTRESOURCEA(102), "BINARY"))) {
printf("find binary resource failed.\n");
}
else {
if ((SizeofRes = SizeofResource(hModule, hRsrc)) != 0x10) {
printf("invalid res size.\n");
}
else {
if (!(gRes = LoadResource(hModule, hRsrc))) {
printf("load res failed.\n");
}
else {
if (!LockResource(gRes))printf("lock res failed.\n");
else {
printf("resource test success.\n");
}
}
}
}
end:
delete[]buffer;
if (m1)LdrUnloadDllMemory(m1);
FreeLibrary(LoadLibraryW(L"wininet.dll"));
FreeLibrary(GetModuleHandleW(L"wininet.dll"));
if (m2)LdrUnloadDllMemory(m2);
return 0;
}
int main() {
//test_default();
//test_ws2_32();
DWORD dwFeatures = 0;
LdrQuerySystemMemoryModuleFeatures(&dwFeatures);
if ((dwFeatures & MEMORY_FEATURE_ALL) != MEMORY_FEATURE_ALL) {
printf("\n");
DebugBreak();
}
auto pOle32 = ReadDllFile("C:\\Windows\\System32\\ole32.dll");
HMEMORYMODULE hModule;
NTSTATUS status = LdrLoadDllMemoryExW(
&hModule,
nullptr,
0,
pOle32,
0,
nullptr,
nullptr
);
delete[]pOle32;
MmpInitialize();
if (NT_SUCCESS(status)) {
LdrUnloadDllMemory(hModule);
HMODULE hModule = LoadLibrary(L"a.dll");
if (hModule) {
HANDLE hThread = CreateThread(nullptr, 0, Thread, nullptr, 0, nullptr);
if (hThread) {
WaitForSingleObject(hThread, INFINITE);
CloseHandle(hThread);
}
FreeLibrary(hModule);
}
return 0;