From 8c8b8e2f4d6310cfa01f3e12293ff1db6b36d4f1 Mon Sep 17 00:00:00 2001 From: Boring <1079299053@qq.com> Date: Mon, 3 Feb 2020 15:10:41 +0800 Subject: [PATCH] Create README.md --- README.md | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..7e37128 --- /dev/null +++ b/README.md @@ -0,0 +1,38 @@ +# MemoryModulePP + +[![Build Status](https://travis-ci.org/joemccann/dillinger.svg?branch=master)](https://travis-ci.org/joemccann/dillinger) + +MemoryModulePP, used to load a DLL from memory. MemoryModulePP is compatible with Win32 API and supports exception handling. + +**MemoryModulePP is developed based on [MemoryModule].** + +**This repository is under development.** + +# Features + - Compatible with Win32 API (GetModuleHandleA/W/Ex GetModuleFileNameA/W/Ex GetProcAddress) + - Support for C ++ exceptions and SEH + - Compatible with Win7(x64) and Win10(x64) + - Optimized MEMORYMODULE structure + - Use reference counting, repeated loading of the same module will update the reference counting, please refer to NtLoadDllMemoryExW + - The above features can be turned off through the dwFlags parameter of NtLoadDllMemoryExW + +### Tech + +MemoryModulePP uses many open source projects and references to work properly: + +* [Vergilius Project][ref1] - Some windows kernel structure reference. +* [MemoryModule] - Load dll from memory, reference and improve part of this repository's code. +* [Blackbone][ref2] - Windows memory hacking library, Referenced the idea of exception handling. +* [Exceptions on Windows x64][ref3] - How Windows x64 Exception Handling Works. (Russian) + +### Todos + + - Compatible with Win8 and x86 architecture + - Improve MEMORYPODULE structure + + + [MemoryModule]: + [ref1]: + [ref2]: + [ref3]: +