admin/fancycode-MemoryModule
1
0
Fork 0
mirror of https://github.com/fancycode/MemoryModule synced 2026-06-06 15:44:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Use spaces instead of tabs - sorry for the noise.

Browse Source
This commit is contained in:
Joachim Bauch
2013-03-09 00:42:29 +01:00
parent f210f67771
commit a199afce7c
3 changed files with 370 additions and 370 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MemoryModule.c
+329 -329
View File
@@ -49,15 +49,15 @@
#include "MemoryModule.h" #include "MemoryModule.h"
typedef struct { typedef struct {
PIMAGE_NT_HEADERS headers; PIMAGE_NT_HEADERS headers;
unsigned char *codeBase; unsigned char *codeBase;
HCUSTOMMODULE *modules; HCUSTOMMODULE *modules;
int numModules; int numModules;
int initialized; int initialized;
CustomLoadLibraryFunc loadLibrary; CustomLoadLibraryFunc loadLibrary;
CustomGetProcAddressFunc getProcAddress; CustomGetProcAddressFunc getProcAddress;
CustomFreeLibraryFunc freeLibrary; CustomFreeLibraryFunc freeLibrary;
void *userdata; void *userdata;
} MEMORYMODULE, *PMEMORYMODULE; } MEMORYMODULE, *PMEMORYMODULE;
typedef BOOL (WINAPI *DllEntryProc)(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpReserved); typedef BOOL (WINAPI *DllEntryProc)(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpReserved);
@@ -68,116 +68,116 @@ typedef BOOL (WINAPI *DllEntryProc)(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID
static void static void
OutputLastError(const char *msg) OutputLastError(const char *msg)
{ {
LPVOID tmp; LPVOID tmp;
char *tmpmsg; char *tmpmsg;
FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS, FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS,
NULL, GetLastError(), MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT), (LPTSTR)&tmp, 0, NULL); NULL, GetLastError(), MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT), (LPTSTR)&tmp, 0, NULL);
tmpmsg = (char *)LocalAlloc(LPTR, strlen(msg) + strlen(tmp) + 3); tmpmsg = (char *)LocalAlloc(LPTR, strlen(msg) + strlen(tmp) + 3);
sprintf(tmpmsg, "%s: %s", msg, tmp); sprintf(tmpmsg, "%s: %s", msg, tmp);
OutputDebugString(tmpmsg); OutputDebugString(tmpmsg);
LocalFree(tmpmsg); LocalFree(tmpmsg);
LocalFree(tmp); LocalFree(tmp);
} }
#endif #endif
static void static void
CopySections(const unsigned char *data, PIMAGE_NT_HEADERS old_headers, PMEMORYMODULE module) CopySections(const unsigned char *data, PIMAGE_NT_HEADERS old_headers, PMEMORYMODULE module)
{ {
int i, size; int i, size;
unsigned char *codeBase = module->codeBase; unsigned char *codeBase = module->codeBase;
unsigned char *dest; unsigned char *dest;
PIMAGE_SECTION_HEADER section = IMAGE_FIRST_SECTION(module->headers); PIMAGE_SECTION_HEADER section = IMAGE_FIRST_SECTION(module->headers);
for (i=0; i<module->headers->FileHeader.NumberOfSections; i++, section++) { for (i=0; i<module->headers->FileHeader.NumberOfSections; i++, section++) {
if (section->SizeOfRawData == 0) { if (section->SizeOfRawData == 0) {
// section doesn't contain data in the dll itself, but may define // section doesn't contain data in the dll itself, but may define
// uninitialized data // uninitialized data
size = old_headers->OptionalHeader.SectionAlignment; size = old_headers->OptionalHeader.SectionAlignment;
if (size > 0) { if (size > 0) {
dest = (unsigned char *)VirtualAlloc(codeBase + section->VirtualAddress, dest = (unsigned char *)VirtualAlloc(codeBase + section->VirtualAddress,
size, size,
MEM_COMMIT, MEM_COMMIT,
PAGE_READWRITE); PAGE_READWRITE);
section->Misc.PhysicalAddress = (POINTER_TYPE)dest; section->Misc.PhysicalAddress = (POINTER_TYPE)dest;
memset(dest, 0, size); memset(dest, 0, size);
} }
// section is empty // section is empty
continue; continue;
} }
// commit memory block and copy data from dll // commit memory block and copy data from dll
dest = (unsigned char *)VirtualAlloc(codeBase + section->VirtualAddress, dest = (unsigned char *)VirtualAlloc(codeBase + section->VirtualAddress,
section->SizeOfRawData, section->SizeOfRawData,
MEM_COMMIT, MEM_COMMIT,
PAGE_READWRITE); PAGE_READWRITE);
memcpy(dest, data + section->PointerToRawData, section->SizeOfRawData); memcpy(dest, data + section->PointerToRawData, section->SizeOfRawData);
section->Misc.PhysicalAddress = (POINTER_TYPE)dest; section->Misc.PhysicalAddress = (POINTER_TYPE)dest;
} }
} }
// Protection flags for memory pages (Executable, Readable, Writeable) // Protection flags for memory pages (Executable, Readable, Writeable)
static int ProtectionFlags[2][2][2] = { static int ProtectionFlags[2][2][2] = {
{ {
// not executable // not executable
{PAGE_NOACCESS, PAGE_WRITECOPY}, {PAGE_NOACCESS, PAGE_WRITECOPY},
{PAGE_READONLY, PAGE_READWRITE}, {PAGE_READONLY, PAGE_READWRITE},
}, { }, {
// executable // executable
{PAGE_EXECUTE, PAGE_EXECUTE_WRITECOPY}, {PAGE_EXECUTE, PAGE_EXECUTE_WRITECOPY},
{PAGE_EXECUTE_READ, PAGE_EXECUTE_READWRITE}, {PAGE_EXECUTE_READ, PAGE_EXECUTE_READWRITE},
}, },
}; };
static void static void
FinalizeSections(PMEMORYMODULE module) FinalizeSections(PMEMORYMODULE module)
{ {
int i; int i;
PIMAGE_SECTION_HEADER section = IMAGE_FIRST_SECTION(module->headers); PIMAGE_SECTION_HEADER section = IMAGE_FIRST_SECTION(module->headers);
#ifdef _WIN64 #ifdef _WIN64
POINTER_TYPE imageOffset = (module->headers->OptionalHeader.ImageBase & 0xffffffff00000000); POINTER_TYPE imageOffset = (module->headers->OptionalHeader.ImageBase & 0xffffffff00000000);
#else #else
#define imageOffset 0 #define imageOffset 0
#endif #endif
// loop through all sections and change access flags // loop through all sections and change access flags
for (i=0; i<module->headers->FileHeader.NumberOfSections; i++, section++) { for (i=0; i<module->headers->FileHeader.NumberOfSections; i++, section++) {
DWORD protect, oldProtect, size; DWORD protect, oldProtect, size;
int executable = (section->Characteristics & IMAGE_SCN_MEM_EXECUTE) != 0; int executable = (section->Characteristics & IMAGE_SCN_MEM_EXECUTE) != 0;
int readable = (section->Characteristics & IMAGE_SCN_MEM_READ) != 0; int readable = (section->Characteristics & IMAGE_SCN_MEM_READ) != 0;
int writeable = (section->Characteristics & IMAGE_SCN_MEM_WRITE) != 0; int writeable = (section->Characteristics & IMAGE_SCN_MEM_WRITE) != 0;
if (section->Characteristics & IMAGE_SCN_MEM_DISCARDABLE) { if (section->Characteristics & IMAGE_SCN_MEM_DISCARDABLE) {
// section is not needed any more and can safely be freed // section is not needed any more and can safely be freed
VirtualFree((LPVOID)((POINTER_TYPE)section->Misc.PhysicalAddress | imageOffset), section->SizeOfRawData, MEM_DECOMMIT); VirtualFree((LPVOID)((POINTER_TYPE)section->Misc.PhysicalAddress | imageOffset), section->SizeOfRawData, MEM_DECOMMIT);
continue; continue;
} }
// determine protection flags based on characteristics // determine protection flags based on characteristics
protect = ProtectionFlags[executable][readable][writeable]; protect = ProtectionFlags[executable][readable][writeable];
if (section->Characteristics & IMAGE_SCN_MEM_NOT_CACHED) { if (section->Characteristics & IMAGE_SCN_MEM_NOT_CACHED) {
protect |= PAGE_NOCACHE; protect |= PAGE_NOCACHE;
} }
// determine size of region // determine size of region
size = section->SizeOfRawData; size = section->SizeOfRawData;
if (size == 0) { if (size == 0) {
if (section->Characteristics & IMAGE_SCN_CNT_INITIALIZED_DATA) { if (section->Characteristics & IMAGE_SCN_CNT_INITIALIZED_DATA) {
size = module->headers->OptionalHeader.SizeOfInitializedData; size = module->headers->OptionalHeader.SizeOfInitializedData;
} else if (section->Characteristics & IMAGE_SCN_CNT_UNINITIALIZED_DATA) { } else if (section->Characteristics & IMAGE_SCN_CNT_UNINITIALIZED_DATA) {
size = module->headers->OptionalHeader.SizeOfUninitializedData; size = module->headers->OptionalHeader.SizeOfUninitializedData;
} }
} }
if (size > 0) { if (size > 0) {
// change memory access flags // change memory access flags
if (VirtualProtect((LPVOID)((POINTER_TYPE)section->Misc.PhysicalAddress | imageOffset), size, protect, &oldProtect) == 0) if (VirtualProtect((LPVOID)((POINTER_TYPE)section->Misc.PhysicalAddress | imageOffset), size, protect, &oldProtect) == 0)
#ifdef DEBUG_OUTPUT #ifdef DEBUG_OUTPUT
OutputLastError("Error protecting memory page") OutputLastError("Error protecting memory page")
#endif #endif
; ;
} }
} }
#ifndef _WIN64 #ifndef _WIN64
#undef imageOffset #undef imageOffset
#endif #endif
@@ -186,118 +186,118 @@ FinalizeSections(PMEMORYMODULE module)
static void static void
PerformBaseRelocation(PMEMORYMODULE module, SIZE_T delta) PerformBaseRelocation(PMEMORYMODULE module, SIZE_T delta)
{ {
DWORD i; DWORD i;
unsigned char *codeBase = module->codeBase; unsigned char *codeBase = module->codeBase;
PIMAGE_DATA_DIRECTORY directory = GET_HEADER_DICTIONARY(module, IMAGE_DIRECTORY_ENTRY_BASERELOC); PIMAGE_DATA_DIRECTORY directory = GET_HEADER_DICTIONARY(module, IMAGE_DIRECTORY_ENTRY_BASERELOC);
if (directory->Size > 0) { if (directory->Size > 0) {
PIMAGE_BASE_RELOCATION relocation = (PIMAGE_BASE_RELOCATION) (codeBase + directory->VirtualAddress); PIMAGE_BASE_RELOCATION relocation = (PIMAGE_BASE_RELOCATION) (codeBase + directory->VirtualAddress);
for (; relocation->VirtualAddress > 0; ) { for (; relocation->VirtualAddress > 0; ) {
unsigned char *dest = codeBase + relocation->VirtualAddress; unsigned char *dest = codeBase + relocation->VirtualAddress;
unsigned short *relInfo = (unsigned short *)((unsigned char *)relocation + IMAGE_SIZEOF_BASE_RELOCATION); unsigned short *relInfo = (unsigned short *)((unsigned char *)relocation + IMAGE_SIZEOF_BASE_RELOCATION);
for (i=0; i<((relocation->SizeOfBlock-IMAGE_SIZEOF_BASE_RELOCATION) / 2); i++, relInfo++) { for (i=0; i<((relocation->SizeOfBlock-IMAGE_SIZEOF_BASE_RELOCATION) / 2); i++, relInfo++) {
DWORD *patchAddrHL; DWORD *patchAddrHL;
#ifdef _WIN64 #ifdef _WIN64
ULONGLONG *patchAddr64; ULONGLONG *patchAddr64;
#endif #endif
int type, offset; int type, offset;
// the upper 4 bits define the type of relocation // the upper 4 bits define the type of relocation
type = *relInfo >> 12; type = *relInfo >> 12;
// the lower 12 bits define the offset // the lower 12 bits define the offset
offset = *relInfo & 0xfff; offset = *relInfo & 0xfff;
switch (type) switch (type)
{ {
case IMAGE_REL_BASED_ABSOLUTE: case IMAGE_REL_BASED_ABSOLUTE:
// skip relocation // skip relocation
break; break;
case IMAGE_REL_BASED_HIGHLOW: case IMAGE_REL_BASED_HIGHLOW:
// change complete 32 bit address // change complete 32 bit address
patchAddrHL = (DWORD *) (dest + offset); patchAddrHL = (DWORD *) (dest + offset);
*patchAddrHL += delta; *patchAddrHL += delta;
break; break;
#ifdef _WIN64 #ifdef _WIN64
case IMAGE_REL_BASED_DIR64: case IMAGE_REL_BASED_DIR64:
patchAddr64 = (ULONGLONG *) (dest + offset); patchAddr64 = (ULONGLONG *) (dest + offset);
*patchAddr64 += delta; *patchAddr64 += delta;
break; break;
#endif #endif
default: default:
//printf("Unknown relocation: %d\n", type); //printf("Unknown relocation: %d\n", type);
break; break;
} }
} }
// advance to next relocation block // advance to next relocation block
relocation = (PIMAGE_BASE_RELOCATION) (((char *) relocation) + relocation->SizeOfBlock); relocation = (PIMAGE_BASE_RELOCATION) (((char *) relocation) + relocation->SizeOfBlock);
} }
} }
} }
static int static int
BuildImportTable(PMEMORYMODULE module) BuildImportTable(PMEMORYMODULE module)
{ {
int result=1; int result=1;
unsigned char *codeBase = module->codeBase; unsigned char *codeBase = module->codeBase;
HCUSTOMMODULE *tmp; HCUSTOMMODULE *tmp;
PIMAGE_DATA_DIRECTORY directory = GET_HEADER_DICTIONARY(module, IMAGE_DIRECTORY_ENTRY_IMPORT); PIMAGE_DATA_DIRECTORY directory = GET_HEADER_DICTIONARY(module, IMAGE_DIRECTORY_ENTRY_IMPORT);
if (directory->Size > 0) { if (directory->Size > 0) {
PIMAGE_IMPORT_DESCRIPTOR importDesc = (PIMAGE_IMPORT_DESCRIPTOR) (codeBase + directory->VirtualAddress); PIMAGE_IMPORT_DESCRIPTOR importDesc = (PIMAGE_IMPORT_DESCRIPTOR) (codeBase + directory->VirtualAddress);
for (; !IsBadReadPtr(importDesc, sizeof(IMAGE_IMPORT_DESCRIPTOR)) && importDesc->Name; importDesc++) { for (; !IsBadReadPtr(importDesc, sizeof(IMAGE_IMPORT_DESCRIPTOR)) && importDesc->Name; importDesc++) {
POINTER_TYPE *thunkRef; POINTER_TYPE *thunkRef;
FARPROC *funcRef; FARPROC *funcRef;
HCUSTOMMODULE handle = module->loadLibrary((LPCSTR) (codeBase + importDesc->Name), module->userdata); HCUSTOMMODULE handle = module->loadLibrary((LPCSTR) (codeBase + importDesc->Name), module->userdata);
if (handle == NULL) { if (handle == NULL) {
SetLastError(ERROR_MOD_NOT_FOUND); SetLastError(ERROR_MOD_NOT_FOUND);
result = 0; result = 0;
break; break;
} }
tmp = (HCUSTOMMODULE *) realloc(module->modules, (module->numModules+1)*(sizeof(HCUSTOMMODULE))); tmp = (HCUSTOMMODULE *) realloc(module->modules, (module->numModules+1)*(sizeof(HCUSTOMMODULE)));
if (tmp == NULL) { if (tmp == NULL) {
module->freeLibrary(handle, module->userdata); module->freeLibrary(handle, module->userdata);
SetLastError(ERROR_OUTOFMEMORY); SetLastError(ERROR_OUTOFMEMORY);
result = 0; result = 0;
break; break;
} }
module->modules = tmp; module->modules = tmp;
module->modules[module->numModules++] = handle; module->modules[module->numModules++] = handle;
if (importDesc->OriginalFirstThunk) { if (importDesc->OriginalFirstThunk) {
thunkRef = (POINTER_TYPE *) (codeBase + importDesc->OriginalFirstThunk); thunkRef = (POINTER_TYPE *) (codeBase + importDesc->OriginalFirstThunk);
funcRef = (FARPROC *) (codeBase + importDesc->FirstThunk); funcRef = (FARPROC *) (codeBase + importDesc->FirstThunk);
} else { } else {
// no hint table // no hint table
thunkRef = (POINTER_TYPE *) (codeBase + importDesc->FirstThunk); thunkRef = (POINTER_TYPE *) (codeBase + importDesc->FirstThunk);
funcRef = (FARPROC *) (codeBase + importDesc->FirstThunk); funcRef = (FARPROC *) (codeBase + importDesc->FirstThunk);
} }
for (; *thunkRef; thunkRef++, funcRef++) { for (; *thunkRef; thunkRef++, funcRef++) {
if (IMAGE_SNAP_BY_ORDINAL(*thunkRef)) { if (IMAGE_SNAP_BY_ORDINAL(*thunkRef)) {
*funcRef = module->getProcAddress(handle, (LPCSTR)IMAGE_ORDINAL(*thunkRef), module->userdata); *funcRef = module->getProcAddress(handle, (LPCSTR)IMAGE_ORDINAL(*thunkRef), module->userdata);
} else { } else {
PIMAGE_IMPORT_BY_NAME thunkData = (PIMAGE_IMPORT_BY_NAME) (codeBase + (*thunkRef)); PIMAGE_IMPORT_BY_NAME thunkData = (PIMAGE_IMPORT_BY_NAME) (codeBase + (*thunkRef));
*funcRef = module->getProcAddress(handle, (LPCSTR)&thunkData->Name, module->userdata); *funcRef = module->getProcAddress(handle, (LPCSTR)&thunkData->Name, module->userdata);
} }
if (*funcRef == 0) { if (*funcRef == 0) {
result = 0; result = 0;
break; break;
} }
} }
if (!result) { if (!result) {
module->freeLibrary(handle, module->userdata); module->freeLibrary(handle, module->userdata);
SetLastError(ERROR_PROC_NOT_FOUND); SetLastError(ERROR_PROC_NOT_FOUND);
break; break;
} }
} }
} }
return result; return result;
} }
static HCUSTOMMODULE _LoadLibrary(LPCSTR filename, void *userdata) static HCUSTOMMODULE _LoadLibrary(LPCSTR filename, void *userdata)
@@ -331,33 +331,33 @@ HMEMORYMODULE MemoryLoadLibraryEx(const void *data,
CustomFreeLibraryFunc freeLibrary, CustomFreeLibraryFunc freeLibrary,
void *userdata) void *userdata)
{ {
PMEMORYMODULE result; PMEMORYMODULE result;
PIMAGE_DOS_HEADER dos_header; PIMAGE_DOS_HEADER dos_header;
PIMAGE_NT_HEADERS old_header; PIMAGE_NT_HEADERS old_header;
unsigned char *code, *headers; unsigned char *code, *headers;
SIZE_T locationDelta; SIZE_T locationDelta;
DllEntryProc DllEntry; DllEntryProc DllEntry;
BOOL successfull; BOOL successfull;
dos_header = (PIMAGE_DOS_HEADER)data; dos_header = (PIMAGE_DOS_HEADER)data;
if (dos_header->e_magic != IMAGE_DOS_SIGNATURE) { if (dos_header->e_magic != IMAGE_DOS_SIGNATURE) {
SetLastError(ERROR_BAD_EXE_FORMAT); SetLastError(ERROR_BAD_EXE_FORMAT);
return NULL; return NULL;
} }
old_header = (PIMAGE_NT_HEADERS)&((const unsigned char *)(data))[dos_header->e_lfanew]; old_header = (PIMAGE_NT_HEADERS)&((const unsigned char *)(data))[dos_header->e_lfanew];
if (old_header->Signature != IMAGE_NT_SIGNATURE) { if (old_header->Signature != IMAGE_NT_SIGNATURE) {
SetLastError(ERROR_BAD_EXE_FORMAT); SetLastError(ERROR_BAD_EXE_FORMAT);
return NULL; return NULL;
} }
// reserve memory for image of library // reserve memory for image of library
// XXX: is it correct to commit the complete memory region at once? // XXX: is it correct to commit the complete memory region at once?
// calling DllEntry raises an exception if we don't... // calling DllEntry raises an exception if we don't...
code = (unsigned char *)VirtualAlloc((LPVOID)(old_header->OptionalHeader.ImageBase), code = (unsigned char *)VirtualAlloc((LPVOID)(old_header->OptionalHeader.ImageBase),
old_header->OptionalHeader.SizeOfImage, old_header->OptionalHeader.SizeOfImage,
MEM_RESERVE | MEM_COMMIT, MEM_RESERVE | MEM_COMMIT,
PAGE_READWRITE); PAGE_READWRITE);
if (code == NULL) { if (code == NULL) {
// try to allocate memory at arbitrary position // try to allocate memory at arbitrary position
@@ -365,155 +365,155 @@ HMEMORYMODULE MemoryLoadLibraryEx(const void *data,
old_header->OptionalHeader.SizeOfImage, old_header->OptionalHeader.SizeOfImage,
MEM_RESERVE | MEM_COMMIT, MEM_RESERVE | MEM_COMMIT,
PAGE_READWRITE); PAGE_READWRITE);
if (code == NULL) { if (code == NULL) {
SetLastError(ERROR_OUTOFMEMORY); SetLastError(ERROR_OUTOFMEMORY);
return NULL; return NULL;
} }
} }
result = (PMEMORYMODULE)HeapAlloc(GetProcessHeap(), 0, sizeof(MEMORYMODULE)); result = (PMEMORYMODULE)HeapAlloc(GetProcessHeap(), 0, sizeof(MEMORYMODULE));
if (result == NULL) { if (result == NULL) {
SetLastError(ERROR_OUTOFMEMORY); SetLastError(ERROR_OUTOFMEMORY);
VirtualFree(code, 0, MEM_RELEASE); VirtualFree(code, 0, MEM_RELEASE);
return NULL; return NULL;
} }
result->codeBase = code; result->codeBase = code;
result->numModules = 0; result->numModules = 0;
result->modules = NULL; result->modules = NULL;
result->initialized = 0; result->initialized = 0;
result->loadLibrary = loadLibrary; result->loadLibrary = loadLibrary;
result->getProcAddress = getProcAddress; result->getProcAddress = getProcAddress;
result->freeLibrary = freeLibrary; result->freeLibrary = freeLibrary;
result->userdata = userdata; result->userdata = userdata;
// commit memory for headers // commit memory for headers
headers = (unsigned char *)VirtualAlloc(code, headers = (unsigned char *)VirtualAlloc(code,
old_header->OptionalHeader.SizeOfHeaders, old_header->OptionalHeader.SizeOfHeaders,
MEM_COMMIT, MEM_COMMIT,
PAGE_READWRITE); PAGE_READWRITE);
// copy PE header to code // copy PE header to code
memcpy(headers, dos_header, dos_header->e_lfanew + old_header->OptionalHeader.SizeOfHeaders); memcpy(headers, dos_header, dos_header->e_lfanew + old_header->OptionalHeader.SizeOfHeaders);
result->headers = (PIMAGE_NT_HEADERS)&((const unsigned char *)(headers))[dos_header->e_lfanew]; result->headers = (PIMAGE_NT_HEADERS)&((const unsigned char *)(headers))[dos_header->e_lfanew];
// update position // update position
result->headers->OptionalHeader.ImageBase = (POINTER_TYPE)code; result->headers->OptionalHeader.ImageBase = (POINTER_TYPE)code;
// copy sections from DLL file block to new memory location // copy sections from DLL file block to new memory location
CopySections(data, old_header, result); CopySections(data, old_header, result);
// adjust base address of imported data // adjust base address of imported data
locationDelta = (SIZE_T)(code - old_header->OptionalHeader.ImageBase); locationDelta = (SIZE_T)(code - old_header->OptionalHeader.ImageBase);
if (locationDelta != 0) { if (locationDelta != 0) {
PerformBaseRelocation(result, locationDelta); PerformBaseRelocation(result, locationDelta);
} }
// load required dlls and adjust function table of imports // load required dlls and adjust function table of imports
if (!BuildImportTable(result)) { if (!BuildImportTable(result)) {
goto error; goto error;
} }
// mark memory pages depending on section headers and release // mark memory pages depending on section headers and release
// sections that are marked as "discardable" // sections that are marked as "discardable"
FinalizeSections(result); FinalizeSections(result);
// get entry point of loaded library // get entry point of loaded library
if (result->headers->OptionalHeader.AddressOfEntryPoint != 0) { if (result->headers->OptionalHeader.AddressOfEntryPoint != 0) {
DllEntry = (DllEntryProc) (code + result->headers->OptionalHeader.AddressOfEntryPoint); DllEntry = (DllEntryProc) (code + result->headers->OptionalHeader.AddressOfEntryPoint);
// notify library about attaching to process // notify library about attaching to process
successfull = (*DllEntry)((HINSTANCE)code, DLL_PROCESS_ATTACH, 0); successfull = (*DllEntry)((HINSTANCE)code, DLL_PROCESS_ATTACH, 0);
if (!successfull) { if (!successfull) {
SetLastError(ERROR_DLL_INIT_FAILED); SetLastError(ERROR_DLL_INIT_FAILED);
goto error; goto error;
} }
result->initialized = 1; result->initialized = 1;
} }
return (HMEMORYMODULE)result; return (HMEMORYMODULE)result;
error: error:
// cleanup // cleanup
MemoryFreeLibrary(result); MemoryFreeLibrary(result);
return NULL; return NULL;
} }
FARPROC MemoryGetProcAddress(HMEMORYMODULE module, const char *name) FARPROC MemoryGetProcAddress(HMEMORYMODULE module, const char *name)
{ {
unsigned char *codeBase = ((PMEMORYMODULE)module)->codeBase; unsigned char *codeBase = ((PMEMORYMODULE)module)->codeBase;
int idx=-1; int idx=-1;
DWORD i, *nameRef; DWORD i, *nameRef;
WORD *ordinal; WORD *ordinal;
PIMAGE_EXPORT_DIRECTORY exports; PIMAGE_EXPORT_DIRECTORY exports;
PIMAGE_DATA_DIRECTORY directory = GET_HEADER_DICTIONARY((PMEMORYMODULE)module, IMAGE_DIRECTORY_ENTRY_EXPORT); PIMAGE_DATA_DIRECTORY directory = GET_HEADER_DICTIONARY((PMEMORYMODULE)module, IMAGE_DIRECTORY_ENTRY_EXPORT);
if (directory->Size == 0) { if (directory->Size == 0) {
// no export table found // no export table found
SetLastError(ERROR_PROC_NOT_FOUND); SetLastError(ERROR_PROC_NOT_FOUND);
return NULL; return NULL;
} }
exports = (PIMAGE_EXPORT_DIRECTORY) (codeBase + directory->VirtualAddress); exports = (PIMAGE_EXPORT_DIRECTORY) (codeBase + directory->VirtualAddress);
if (exports->NumberOfNames == 0 || exports->NumberOfFunctions == 0) { if (exports->NumberOfNames == 0 || exports->NumberOfFunctions == 0) {
// DLL doesn't export anything // DLL doesn't export anything
SetLastError(ERROR_PROC_NOT_FOUND); SetLastError(ERROR_PROC_NOT_FOUND);
return NULL; return NULL;
} }
// search function name in list of exported names // search function name in list of exported names
nameRef = (DWORD *) (codeBase + exports->AddressOfNames); nameRef = (DWORD *) (codeBase + exports->AddressOfNames);
ordinal = (WORD *) (codeBase + exports->AddressOfNameOrdinals); ordinal = (WORD *) (codeBase + exports->AddressOfNameOrdinals);
for (i=0; i<exports->NumberOfNames; i++, nameRef++, ordinal++) { for (i=0; i<exports->NumberOfNames; i++, nameRef++, ordinal++) {
if (stricmp(name, (const char *) (codeBase + (*nameRef))) == 0) { if (stricmp(name, (const char *) (codeBase + (*nameRef))) == 0) {
idx = *ordinal; idx = *ordinal;
break; break;
} }
} }
if (idx == -1) { if (idx == -1) {
// exported symbol not found // exported symbol not found
SetLastError(ERROR_PROC_NOT_FOUND); SetLastError(ERROR_PROC_NOT_FOUND);
return NULL; return NULL;
} }
if ((DWORD)idx > exports->NumberOfFunctions) { if ((DWORD)idx > exports->NumberOfFunctions) {
// name <-> ordinal number don't match // name <-> ordinal number don't match
SetLastError(ERROR_PROC_NOT_FOUND); SetLastError(ERROR_PROC_NOT_FOUND);
return NULL; return NULL;
} }
// AddressOfFunctions contains the RVAs to the "real" functions // AddressOfFunctions contains the RVAs to the "real" functions
return (FARPROC) (codeBase + (*(DWORD *) (codeBase + exports->AddressOfFunctions + (idx*4)))); return (FARPROC) (codeBase + (*(DWORD *) (codeBase + exports->AddressOfFunctions + (idx*4))));
} }
void MemoryFreeLibrary(HMEMORYMODULE mod) void MemoryFreeLibrary(HMEMORYMODULE mod)
{ {
int i; int i;
PMEMORYMODULE module = (PMEMORYMODULE)mod; PMEMORYMODULE module = (PMEMORYMODULE)mod;
if (module != NULL) { if (module != NULL) {
if (module->initialized != 0) { if (module->initialized != 0) {
// notify library about detaching from process // notify library about detaching from process
DllEntryProc DllEntry = (DllEntryProc) (module->codeBase + module->headers->OptionalHeader.AddressOfEntryPoint); DllEntryProc DllEntry = (DllEntryProc) (module->codeBase + module->headers->OptionalHeader.AddressOfEntryPoint);
(*DllEntry)((HINSTANCE)module->codeBase, DLL_PROCESS_DETACH, 0); (*DllEntry)((HINSTANCE)module->codeBase, DLL_PROCESS_DETACH, 0);
module->initialized = 0; module->initialized = 0;
} }
if (module->modules != NULL) { if (module->modules != NULL) {
// free previously opened libraries // free previously opened libraries
for (i=0; i<module->numModules; i++) { for (i=0; i<module->numModules; i++) {
if (module->modules[i] != NULL) { if (module->modules[i] != NULL) {
module->freeLibrary(module->modules[i], module->userdata); module->freeLibrary(module->modules[i], module->userdata);
} }
} }
free(module->modules); free(module->modules);
} }
if (module->codeBase != NULL) { if (module->codeBase != NULL) {
// release memory of library // release memory of library
VirtualFree(module->codeBase, 0, MEM_RELEASE); VirtualFree(module->codeBase, 0, MEM_RELEASE);
} }
HeapFree(GetProcessHeap(), 0, module); HeapFree(GetProcessHeap(), 0, module);
} }
} }
example/DllLoader/DllLoader.cpp
+40 -40
View File
@@ -12,59 +12,59 @@ typedef int (*addNumberProc)(int, int);
void LoadFromFile(void) void LoadFromFile(void)
{ {
addNumberProc addNumber; addNumberProc addNumber;
HINSTANCE handle = LoadLibrary(DLL_FILE); HINSTANCE handle = LoadLibrary(DLL_FILE);
if (handle == NULL) if (handle == NULL)
return; return;
addNumber = (addNumberProc)GetProcAddress(handle, "addNumbers"); addNumber = (addNumberProc)GetProcAddress(handle, "addNumbers");
printf("From file: %d\n", addNumber(1, 2)); printf("From file: %d\n", addNumber(1, 2));
FreeLibrary(handle); FreeLibrary(handle);
} }
void LoadFromMemory(void) void LoadFromMemory(void)
{ {
FILE *fp; FILE *fp;
unsigned char *data=NULL; unsigned char *data=NULL;
size_t size; size_t size;
HMEMORYMODULE module; HMEMORYMODULE module;
addNumberProc addNumber; addNumberProc addNumber;
fp = fopen(DLL_FILE, "rb"); fp = fopen(DLL_FILE, "rb");
if (fp == NULL) if (fp == NULL)
{ {
printf("Can't open DLL file \"%s\".", DLL_FILE); printf("Can't open DLL file \"%s\".", DLL_FILE);
goto exit; goto exit;
} }
fseek(fp, 0, SEEK_END); fseek(fp, 0, SEEK_END);
size = ftell(fp); size = ftell(fp);
data = (unsigned char *)malloc(size); data = (unsigned char *)malloc(size);
fseek(fp, 0, SEEK_SET); fseek(fp, 0, SEEK_SET);
fread(data, 1, size, fp); fread(data, 1, size, fp);
fclose(fp); fclose(fp);
module = MemoryLoadLibrary(data); module = MemoryLoadLibrary(data);
if (module == NULL) if (module == NULL)
{ {
printf("Can't load library from memory.\n"); printf("Can't load library from memory.\n");
goto exit; goto exit;
} }
addNumber = (addNumberProc)MemoryGetProcAddress(module, "addNumbers"); addNumber = (addNumberProc)MemoryGetProcAddress(module, "addNumbers");
printf("From memory: %d\n", addNumber(1, 2)); printf("From memory: %d\n", addNumber(1, 2));
MemoryFreeLibrary(module); MemoryFreeLibrary(module);
exit: exit:
if (data) if (data)
free(data); free(data);
} }
int main(int argc, char* argv[]) int main(int argc, char* argv[])
{ {
LoadFromFile(); LoadFromFile();
printf("\n\n"); printf("\n\n");
LoadFromMemory(); LoadFromMemory();
return 0; return 0;
} }
example/SampleDLL/SampleDLL.cpp
+1 -1
View File
@@ -4,7 +4,7 @@ extern "C" {
SAMPLEDLL_API int addNumbers(int a, int b) SAMPLEDLL_API int addNumbers(int a, int b)
{ {
return a + b; return a + b;
} }
} }