// test.cpp : Defines the entry point for the console application.
//
#include "stdafx.h"
#include <Windows.h>
#include <WinNT.h>
#include <stdio.h>
#include <conio.h>
#include "tools.h"
int main(int argc, char* argv[])
{
try{
HANDLE hFile=CreateFile("core.dll",GENERIC_READ,NULL,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,NULL);
printf("hFile=%d\n",hFile);
if (hFile==INVALID_HANDLE_VALUE){
throw "hFile==INVALID_HANDLE_VALUE";
}
try{
DWORD dwFileSize=GetFileSize(hFile,NULL);
printf("dwFileSize=%d\n",dwFileSize);
if (!dwFileSize){
throw "dwFileSize==0";
}
try{
HANDLE hFileMapping=CreateFileMapping(hFile,NULL,PAGE_READONLY,0,0,NULL);
printf("hFileMapping=%d\n",hFileMapping);
if (hFileMapping==INVALID_HANDLE_VALUE){
throw "hFileMapping==INVALID_HANDLE_VALUE";
}
try{
void *pFileMapping=MapViewOfFile(hFileMapping,FILE_MAP_READ,0,0,0);
printf("pFileMapping=%d\n",pFileMapping);
if (!pFileMapping){
throw "pFileMapping==0";
}
try{
PIMAGE_DOS_HEADER pDosHeader;
pDosHeader=(PIMAGE_DOS_HEADER)pFileMapping;
if (pDosHeader->e_magic!=IMAGE_DOS_SIGNATURE){
throw "pDosHeader->e_magic!=IMAGE_DOS_SIGNATURE";
}
printf("pDosHeader->e_magic==IMAGE_DOS_SIGNATURE\n");
printf("pDosHeader->e_lfanew=%d\n",pDosHeader->e_lfanew);
DWORD *pPeFlag=(DWORD *)((DWORD)pFileMapping+pDosHeader->e_lfanew);
if (*pPeFlag!=IMAGE_NT_SIGNATURE){
throw "*pPeFlag!=IMAGE_NT_SIGNATURE";
}
printf("*pPeFlag==IMAGE_NT_SIGNATURE\n");
PIMAGE_FILE_HEADER pPeHeader=(PIMAGE_FILE_HEADER)((DWORD)pPeFlag+sizeof(DWORD));
pPeHeader->NumberOfSections;
printf("NumOfSections=%d\n",pPeHeader->NumberOfSections);
PIMAGE_OPTIONAL_HEADER pOptionalHeader=(PIMAGE_OPTIONAL_HEADER)((DWORD)pPeHeader+sizeof(IMAGE_FILE_HEADER));
if (pOptionalHeader->Magic!=0x010B){
throw "pOptionalHeader->Magic!=0x010B";
}
printf("pOptionalHeader->Magic==0x010B\n");
printf("SizeOfImage=%d\n",pOptionalHeader->SizeOfImage);
printf("SizeOfHeaders=%d\n",pOptionalHeader->SizeOfHeaders);
printf("SizeOfCode=%d\n",pOptionalHeader->SizeOfCode);
printf("FileAlignment=%d\n",pOptionalHeader->FileAlignment);
printf("SectionAlignment=%d\n",pOptionalHeader->SectionAlignment);
printf("AddressOfEntryPoint=%d(RVA)\n",pOptionalHeader->AddressOfEntryPoint);
HANDLE hMemoryExec=CreateFileMapping(INVALID_HANDLE_VALUE,NULL,PAGE_EXECUTE_READWRITE,0,pOptionalHeader->SizeOfImage,NULL);
printf("hMemoryExec=%d\n",hMemoryExec);
if (hMemoryExec==INVALID_HANDLE_VALUE){
throw "hMemoryExec==INVALID_HANDLE_VALUE";
}
try{
void *pMemoryExec=MapViewOfFile(hMemoryExec,FILE_MAP_WRITE,0,0,0);
printf("pMemoryExec=%d\n",pMemoryExec);
if (!pMemoryExec){
throw "pMemoryExec==0";
}
try{
memcpy(pMemoryExec,pFileMapping,pOptionalHeader->SizeOfHeaders);
PIMAGE_SECTION_HEADER pIMAGE_SECTION_HEADER=(PIMAGE_SECTION_HEADER)((DWORD)pOptionalHeader+sizeof(IMAGE_OPTIONAL_HEADER));
UINT i;
for (i=0;i<pPeHeader->NumberOfSections;i++)
{
printf("SECTION Name=%s\n",pIMAGE_SECTION_HEADER[i].Name);
printf("PointerToRawData=%d\n",pIMAGE_SECTION_HEADER[i].PointerToRawData);
printf("SizeOfRawData=%d\n",pIMAGE_SECTION_HEADER[i].SizeOfRawData);
printf("VirtualAddress=%d(RAV)\n",pIMAGE_SECTION_HEADER[i].VirtualAddress);
if (pIMAGE_SECTION_HEADER[i].PointerToRawData){
memcpy((void *)((DWORD)pMemoryExec+pIMAGE_SECTION_HEADER[i].VirtualAddress),(void *)((DWORD)pFileMapping+pIMAGE_SECTION_HEADER[i].PointerToRawData),pIMAGE_SECTION_HEADER[i].SizeOfRawData);
}else{
memset((void *)((DWORD)pMemoryExec+pIMAGE_SECTION_HEADER[i].VirtualAddress),0,pIMAGE_SECTION_HEADER[i].SizeOfRawData);
}
}
PIMAGE_SECTION_HEADER psh;
PIMAGE_BASE_RELOCATION pBaseRelocation=(PIMAGE_BASE_RELOCATION)ImageDirectoryOffset(pMemoryExec,IMAGE_DIRECTORY_ENTRY_BASERELOC,&psh);
printf("pBaseRelocation=%d\n",pBaseRelocation);
if (!pBaseRelocation){
throw "Can'not find IMAGE_DIRECTORY_ENTRY_BASERELOC";
}
printf("pBaseRelocation@SECTION %s\n",psh->Name);
UINT16 *pBL;
for (i=(pOptionalHeader->DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC].Size/4096)+1;i>0;i--){
pBL=(UINT16 *)((DWORD)pBaseRelocation+sizeof(IMAGE_BASE_RELOCATION));
for (DWORD j=1;j<=(pBaseRelocation->SizeOfBlock-sizeof(IMAGE_BASE_RELOCATION))/2;j++){
if (*pBL&0xF000){
printf("Found RELOCATION Block #%d\n",j);
printf("Base Address=%d(RVA)\n",pBaseRelocation->VirtualAddress);
printf("Offset=%d\n",*pBL&0x0FFF);
DWORD *Point=(DWORD *)((DWORD)pMemoryExec+pBaseRelocation->VirtualAddress+(*pBL&0x0FFF));
printf("Memary@%d\n",Point);
printf("Old Point=%d\n",*Point);
printf("New Point=%d\n",*Point+((DWORD)pMemoryExec)-pOptionalHeader->ImageBase);
*Point+=(((DWORD)pMemoryExec)-pOptionalHeader->ImageBase);
}
pBL++;
}
pBaseRelocation+=4096;
}
PIMAGE_IMPORT_DESCRIPTOR pImportedSymbols=(PIMAGE_IMPORT_DESCRIPTOR)ImageDirectoryOffset(pMemoryExec,IMAGE_DIRECTORY_ENTRY_IMPORT,&psh);
printf("pImportedSymbols=%d\n",pImportedSymbols);
if (!pImportedSymbols){
throw "Can'not find IMAGE_DIRECTORY_ENTRY_BASERELOC";
}
printf("pImportedSymbols@SECTION %s\n",psh->Name);
for (i=0;i<(pOptionalHeader->DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].Size/sizeof(IMAGE_IMPORT_DESCRIPTOR));i++){
if (pImportedSymbols[i].Characteristics==0){
break;
}
printf("Found DLL Import %s\n",(char *)((DWORD)pMemoryExec+pImportedSymbols[i].Name));
DWORD * pImageThunkData=(DWORD *)((DWORD)pMemoryExec+pImportedSymbols[i].FirstThunk);
PIMAGE_IMPORT_BY_NAME pImageImportByName;
HMODULE hDll=LoadLibrary((char *)((DWORD)pMemoryExec+pImportedSymbols[i].Name));
if (!hDll){
throw "Can't load dll";
}
printf("Load Library %s ; HMODULE=%d\n",(char *)((DWORD)pMemoryExec+pImportedSymbols[i].Name),hDll);
do{
pImageImportByName=(PIMAGE_IMPORT_BY_NAME)((DWORD)pMemoryExec+*pImageThunkData);
printf("Found Function Import %s @ %d\n",pImageImportByName->Name,pImageImportByName);
*pImageThunkData=(ULONG)GetProcAddress(hDll,(char *)pImageImportByName->Name);
printf("Import %s @ %d\n",pImageImportByName->Name,*pImageThunkData);
pImageThunkData++;
}while(*pImageThunkData);
}
BOOL (__stdcall* entry)(HANDLE hModule,DWORD ul_reason_for_call,LPVOID lpReserved);
entry=(BOOL (__stdcall *)(HANDLE hModule,DWORD ul_reason_for_call,LPVOID lpReserved))((DWORD)pMemoryExec+pOptionalHeader->AddressOfEntryPoint);
printf("Run Exec @ %d\n",entry);
BOOL result=entry((HANDLE)1,(DWORD)1,(LPVOID)1);
printf("result=%d\n",result);
}catch(char *str){
printf("Exceptional %s\n",str);
}
UnmapViewOfFile(pMemoryExec);
}catch(char *str){
printf("Exceptional %s\n",str);
}
CloseHandle(hMemoryExec);
}catch(char *str){
printf("Exceptional %s\n",str);
}
UnmapViewOfFile(pFileMapping);
}catch (char *str){
printf("Exceptional %s\n",str);
}
CloseHandle(hFileMapping);
}catch(char *str){
printf("Exceptional %s\n",str);
}
}catch(char *str){
printf("Exceptional %s\n",str);
}
CloseHandle(hFile);
}catch(char *str){
printf("Exceptional %s\n",str);
}catch(...){
printf("Exceptional Unknow,LastError=%d\n",GetLastError());
}
printf("Exit\n");
return 0;
}
