GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Support loading (and running) EXE files (fixes #7). · SokuDev/MemoryModule@5a448ce

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

MemoryModule.c
MemoryModule.h
example/DllLoader
- DllLoaderLoader.cpp
- Makefile

Expand file treeCollapse file tree

Open diff view settings

Collapse file

`‎MemoryModule.c‎`

Copy file name to clipboardExpand all lines: MemoryModule.c

+38-12Lines changed: 38 additions & 12 deletions

Original file line number	Diff line number	Diff line change
`@@ -49,20 +49,24 @@`
`49`	`49`
`50`	`50`	`#include "MemoryModule.h"`
`51`	`51`
	`52`	`+typedef BOOL (WINAPI *DllEntryProc)(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpReserved);`
	`53`	`+typedef int (WINAPI *ExeEntryProc)(void);`
	`54`	`+`
`52`	`55`	`typedef struct {`
`53`	`56`	`PIMAGE_NT_HEADERS headers;`
`54`	`57`	`unsigned char *codeBase;`
`55`	`58`	`HCUSTOMMODULE *modules;`
`56`	`59`	`int numModules;`
`57`	`60`	`int initialized;`
	`61`	`+ int isDLL;`
	`62`	`+ int isRelocated;`
`58`	`63`	`CustomLoadLibraryFunc loadLibrary;`
`59`	`64`	`CustomGetProcAddressFunc getProcAddress;`
`60`	`65`	`CustomFreeLibraryFunc freeLibrary;`
`61`	`66`	`void *userdata;`
	`67`	`+ ExeEntryProc exeEntry;`
`62`	`68`	`} MEMORYMODULE, *PMEMORYMODULE;`
`63`	`69`
`64`		`-typedef BOOL (WINAPI *DllEntryProc)(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpReserved);`
`65`		`-`
`66`	`70`	`#define GET_HEADER_DICTIONARY(module, idx) &(module)->headers->OptionalHeader.DataDirectory[idx]`
`67`	`71`
`68`	`72`	`#ifdef DEBUG_OUTPUT`
`@@ -202,11 +206,12 @@ ExecuteTLS(PMEMORYMODULE module)`
`202`	`206`	`}`
`203`	`207`	`}`
`204`	`208`
`205`		`-static void`
	`209`	`+static int`
`206`	`210`	`PerformBaseRelocation(PMEMORYMODULE module, SIZE_T delta)`
`207`	`211`	`{`
`208`	`212`	`DWORD i;`
`209`	`213`	`unsigned char *codeBase = module->codeBase;`
	`214`	`+ int result = 0;`
`210`	`215`
`211`	`216`	`PIMAGE_DATA_DIRECTORY directory = GET_HEADER_DICTIONARY(module, IMAGE_DIRECTORY_ENTRY_BASERELOC);`
`212`	`217`	`if (directory->Size > 0) {`
`@@ -254,7 +259,9 @@ PerformBaseRelocation(PMEMORYMODULE module, SIZE_T delta)`
`254`	`259`	`// advance to next relocation block`
`255`	`260`	`relocation = (PIMAGE_BASE_RELOCATION) (((char *) relocation) + relocation->SizeOfBlock);`
`256`	`261`	`}`
	`262`	`+ result = 1;`
`257`	`263`	`}`
	`264`	`+ return result;`
`258`	`265`	`}`
`259`	`266`
`260`	`267`	`static int`
`@@ -355,7 +362,6 @@ HMEMORYMODULE MemoryLoadLibraryEx(const void *data,`
`355`	`362`	`PIMAGE_NT_HEADERS old_header;`
`356`	`363`	`unsigned char code, headers;`
`357`	`364`	`SIZE_T locationDelta;`
`358`		`- DllEntryProc DllEntry;`
`359`	`365`	`BOOL successfull;`
`360`	`366`
`361`	`367`	`dos_header = (PIMAGE_DOS_HEADER)data;`
`@@ -410,6 +416,7 @@ HMEMORYMODULE MemoryLoadLibraryEx(const void *data,`
`410`	`416`	`result->numModules = 0;`
`411`	`417`	`result->modules = NULL;`
`412`	`418`	`result->initialized = 0;`
	`419`	`+ result->isDLL = (old_header->FileHeader.Characteristics & IMAGE_FILE_DLL) != 0;`
`413`	`420`	`result->loadLibrary = loadLibrary;`
`414`	`421`	`result->getProcAddress = getProcAddress;`
`415`	`422`	`result->freeLibrary = freeLibrary;`
`@@ -434,7 +441,9 @@ HMEMORYMODULE MemoryLoadLibraryEx(const void *data,`
`434`	`441`	`// adjust base address of imported data`
`435`	`442`	`locationDelta = (SIZE_T)(code - old_header->OptionalHeader.ImageBase);`
`436`	`443`	`if (locationDelta != 0) {`
`437`		`- PerformBaseRelocation(result, locationDelta);`
	`444`	`+ result->isRelocated = PerformBaseRelocation(result, locationDelta);`
	`445`	`+ } else {`
	`446`	`+ result->isRelocated = 1;`
`438`	`447`	`}`
`439`	`448`
`440`	`449`	`// load required dlls and adjust function table of imports`
`@@ -451,14 +460,20 @@ HMEMORYMODULE MemoryLoadLibraryEx(const void *data,`
`451`	`460`
`452`	`461`	`// get entry point of loaded library`
`453`	`462`	`if (result->headers->OptionalHeader.AddressOfEntryPoint != 0) {`
`454`		`- DllEntry = (DllEntryProc) (code + result->headers->OptionalHeader.AddressOfEntryPoint);`
`455`		`- // notify library about attaching to process`
`456`		`- successfull = (*DllEntry)((HINSTANCE)code, DLL_PROCESS_ATTACH, 0);`
`457`		`- if (!successfull) {`
`458`		`- SetLastError(ERROR_DLL_INIT_FAILED);`
`459`		`- goto error;`
	`463`	`+ if (result->isDLL) {`
	`464`	`+ DllEntryProc DllEntry = (DllEntryProc) (code + result->headers->OptionalHeader.AddressOfEntryPoint);`
	`465`	`+ // notify library about attaching to process`
	`466`	`+ successfull = (*DllEntry)((HINSTANCE)code, DLL_PROCESS_ATTACH, 0);`
	`467`	`+ if (!successfull) {`
	`468`	`+ SetLastError(ERROR_DLL_INIT_FAILED);`
	`469`	`+ goto error;`
	`470`	`+ }`
	`471`	`+ result->initialized = 1;`
	`472`	`+ } else {`
	`473`	`+ result->exeEntry = (ExeEntryProc) (code + result->headers->OptionalHeader.AddressOfEntryPoint);`
`460`	`474`	`}`
`461`		`- result->initialized = 1;`
	`475`	`+ } else {`
	`476`	`+ result->exeEntry = NULL;`
`462`	`477`	`}`
`463`	`478`
`464`	`479`	`return (HMEMORYMODULE)result;`
`@@ -549,6 +564,17 @@ void MemoryFreeLibrary(HMEMORYMODULE mod)`
`549`	`564`	`}`
`550`	`565`	`}`
`551`	`566`
	`567`	`+int MemoryCallEntryPoint(HMEMORYMODULE mod)`
	`568`	`+{`
	`569`	`+ PMEMORYMODULE module = (PMEMORYMODULE)mod;`
	`570`	`+`
	`571`	`+ if (module == NULL \|\| module->isDLL \|\| module->exeEntry == NULL \|\| !module->isRelocated) {`
	`572`	`+ return -1;`
	`573`	`+ }`
	`574`	`+`
	`575`	`+ return module->exeEntry();`
	`576`	`+}`
	`577`	`+`
`552`	`578`	`#define DEFAULT_LANGUAGE MAKELANGID(LANG_NEUTRAL, SUBLANG_NEUTRAL)`
`553`	`579`
`554`	`580`	`HMEMORYRSRC MemoryFindResource(HMEMORYMODULE module, LPCTSTR name, LPCTSTR type)`

Collapse file

`‎MemoryModule.h‎`

Copy file name to clipboardExpand all lines: MemoryModule.h

+16-3Lines changed: 16 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -44,15 +44,15 @@ typedef FARPROC (CustomGetProcAddressFunc)(HCUSTOMMODULE, LPCSTR, void );`
`44`	`44`	`typedef void (CustomFreeLibraryFunc)(HCUSTOMMODULE, void );`
`45`	`45`
`46`	`46`	`/**`
`47`		`- * Load DLL from memory location.`
	`47`	`+ * Load EXE/DLL from memory location.`
`48`	`48`	`*`
`49`	`49`	`* All dependencies are resolved using default LoadLibrary/GetProcAddress`
`50`	`50`	`* calls through the Windows API.`
`51`	`51`	`*/`
`52`	`52`	`HMEMORYMODULE MemoryLoadLibrary(const void *);`
`53`	`53`
`54`	`54`	`/**`
`55`		`- * Load DLL from memory location using custom dependency resolvers.`
	`55`	`+ * Load EXE/DLL from memory location using custom dependency resolvers.`
`56`	`56`	`*`
`57`	`57`	`* Dependencies will be resolved using passed callback methods.`
`58`	`58`	`*/`
`@@ -68,10 +68,23 @@ HMEMORYMODULE MemoryLoadLibraryEx(const void *,`
`68`	`68`	`FARPROC MemoryGetProcAddress(HMEMORYMODULE, LPCSTR);`
`69`	`69`
`70`	`70`	`/**`
`71`		`- * Free previously loaded DLL.`
	`71`	`+ * Free previously loaded EXE/DLL.`
`72`	`72`	`*/`
`73`	`73`	`void MemoryFreeLibrary(HMEMORYMODULE);`
`74`	`74`
	`75`	`+/**`
	`76`	`+ * Execute entry point (EXE only). The entry point can only be executed`
	`77`	`+ * if the EXE has been loaded to the correct base address or it could`
	`78`	`+ * be relocated (i.e. relocation information have not been stripped by`
	`79`	`+ * the linker).`
	`80`	`+ *`
	`81`	`+ * Important: calling this function will not return, i.e. once the loaded`
	`82`	`+ * EXE finished running, the process will terminate.`
	`83`	`+ *`
	`84`	`+ * Returns a negative value if the entry point could not be executed.`
	`85`	`+ */`
	`86`	`+int MemoryCallEntryPoint(HMEMORYMODULE);`
	`87`	`+`
`75`	`88`	`/**`
`76`	`89`	`* Find the location of a resource with the specified type and name.`
`77`	`90`	`*/`

Collapse file

`‎example/DllLoader/DllLoaderLoader.cpp‎`

Copy file name to clipboard

+57Lines changed: 57 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,57 @@`
	`1`	`+#define WIN32_LEAN_AND_MEAN`
	`2`	`+`
	`3`	`+#include <windows.h>`
	`4`	`+#include <tchar.h>`
	`5`	`+#include <stdio.h>`
	`6`	`+#include <malloc.h>`
	`7`	`+`
	`8`	`+#include "../../MemoryModule.h"`
	`9`	`+`
	`10`	`+#define EXE_FILE TEXT("DllLoader.exe")`
	`11`	`+`
	`12`	`+int RunFromMemory(void)`
	`13`	`+{`
	`14`	`+ FILE *fp;`
	`15`	`+ unsigned char *data=NULL;`
	`16`	`+ size_t size;`
	`17`	`+ HMEMORYMODULE handle;`
	`18`	`+ int result = -1;`
	`19`	`+`
	`20`	`+ fp = _tfopen(EXE_FILE, _T("rb"));`
	`21`	`+ if (fp == NULL)`
	`22`	`+ {`
	`23`	`+ _tprintf(_T("Can't open executable \"%s\"."), EXE_FILE);`
	`24`	`+ goto exit;`
	`25`	`+ }`
	`26`	`+`
	`27`	`+ fseek(fp, 0, SEEK_END);`
	`28`	`+ size = ftell(fp);`
	`29`	`+ data = (unsigned char *)malloc(size);`
	`30`	`+ fseek(fp, 0, SEEK_SET);`
	`31`	`+ fread(data, 1, size, fp);`
	`32`	`+ fclose(fp);`
	`33`	`+`
	`34`	`+ handle = MemoryLoadLibrary(data);`
	`35`	`+ if (handle == NULL)`
	`36`	`+ {`
	`37`	`+ _tprintf(_T("Can't load library from memory.\n"));`
	`38`	`+ goto exit;`
	`39`	`+ }`
	`40`	`+`
	`41`	`+ result = MemoryCallEntryPoint(handle);`
	`42`	`+ if (result < 0) {`
	`43`	`+ _tprintf(_T("Could not execute entry point: %d\n"), result);`
	`44`	`+ }`
	`45`	`+ MemoryFreeLibrary(handle);`
	`46`	`+`
	`47`	`+exit:`
	`48`	`+ if (data)`
	`49`	`+ free(data);`
	`50`	`+ return result;`
	`51`	`+}`
	`52`	`+`
	`53`	`+int main(int argc, char* argv[])`
	`54`	`+{`
	`55`	`+ return RunFromMemory();`
	`56`	`+}`
	`57`	`+`

Collapse file

`‎example/DllLoader/Makefile‎`

Copy file name to clipboardExpand all lines: example/DllLoader/Makefile

+8-2Lines changed: 8 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -22,9 +22,15 @@ CFLAGS += -DUNICODE -D_UNICODE`
`22`	`22`	`endif`
`23`	`23`
`24`	`24`	`OBJ = DllLoader.o ../../MemoryModule.o`
	`25`	`+OBJ_LOADER = DllLoaderLoader.o ../../MemoryModule.o`
	`26`	`+`
	`27`	`+all: DllLoader.exe DllLoaderLoader.exe`
`25`	`28`
`26`	`29`	`DllLoader.exe: $(OBJ)`
`27`		`- $(CC) $(LDFLAGS) -o DllLoader.exe $(OBJ)`
	`30`	`+ $(CC) $(LDFLAGS) -Wl,--image-base -Wl,0x20000000 -o DllLoader.exe $(OBJ)`
	`31`	`+`
	`32`	`+DllLoaderLoader.exe: $(OBJ_LOADER)`
	`33`	`+ $(CC) $(LDFLAGS) -Wl,--image-base -Wl,0x10000000 -o DllLoaderLoader.exe $(OBJ_LOADER)`
`28`	`34`
`29`	`35`	`%.o: %.cpp`
`30`	`36`	`$(CXX) $(CFLAGS) -c $<`
`@@ -33,4 +39,4 @@ DllLoader.exe: $(OBJ)`
`33`	`39`	`$(CC) $(CFLAGS) -c $<`
`34`	`40`
`35`	`41`	`clean:`
`36`		`- $(RM) -rf $(OBJ) DllLoader.exe`
	`42`	`+ $(RM) -rf $(OBJ) $(OBJ_LOADER) DllLoader.exe DllLoaderLoader.exe`

0 commit comments

Comments

0 (0)

You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.