学步园

//从内存中加载DLL DELPHI版<br /> unit MemLibrary;<br /> interface<br /> uses<br /> Windows;</p> <p>function memLoadLibrary(pLib: Pointer): DWord;<br /> function memGetProcAddress(dwLibHandle: DWord; pFunctionName: PChar): Pointer; stdcall;<br /> function memFreeLibrary(dwHandle: DWord): Boolean;</p> <p>implementation<br /> procedure ChangeReloc(baseorgp, basedllp, relocp: pointer; size: cardinal);<br /> type<br /> TRelocblock = record<br /> vaddress: integer;<br /> size: integer;<br /> end;<br /> PRelocblock = ^TRelocblock;<br /> var<br /> myreloc: PRelocblock;<br /> reloccount: integer;<br /> startp: ^word;<br /> i: cardinal;<br /> p: ^cardinal;<br /> dif: cardinal;<br /> begin<br /> myreloc := relocp;<br /> dif := cardinal(basedllp)-cardinal(baseorgp);<br /> startp := pointer(cardinal(relocp)+8);<br /> while myreloc^.vaddress <> 0 do<br /> begin<br /> reloccount := (myreloc^.size-8) div sizeof(word);<br /> for i := 0 to reloccount-1 do<br /> begin<br /> if (startp^ xor $3000 < $1000) then<br /> begin<br /> p := pointer(myreloc^.vaddress+startp^ mod $3000+integer(basedllp));<br /> p^ := p^+dif;<br /> end;<br /> startp := pointer(cardinal(startp)+sizeof(word));<br /> end;<br /> myreloc := pointer(startp);<br /> startp := pointer(cardinal(startp)+8);<br /> end;<br /> end;<br /> procedure CreateImportTable(dllbasep, importp: pointer); stdcall;<br /> type<br /> timportblock = record<br /> Characteristics: cardinal;<br /> TimeDateStamp: cardinal;<br /> ForwarderChain: cardinal;<br /> Name: pchar;<br /> FirstThunk: pointer;<br /> end;<br /> pimportblock = ^timportblock;<br /> var<br /> myimport: pimportblock;<br /> thunksread, thunkswrite: ^pointer;<br /> dllname: pchar;<br /> dllh: thandle;<br /> old: cardinal;<br /> begin<br /> myimport := importp;<br /> while (myimport^.FirstThunk <> nil) and (myimport^.Name <> nil) do<br /> begin<br /> dllname := pointer(integer(dllbasep)+integer(myimport^.name));<br /> dllh := LoadLibrary(dllname);<br /> thunksread := pointer(integer(myimport^.FirstThunk)+integer(dllbasep));<br /> thunkswrite := thunksread;<br /> if integer(myimport^.TimeDateStamp) = -1 then<br /> thunksread := pointer(integer(myimport^.Characteristics)+integer(dllbasep));<br /> while (thunksread^ <> nil) do<br /> begin<br /> if VirtualProtect(thunkswrite,4,PAGE_EXECUTE_READWRITE,old) then<br /> begin<br /> if (cardinal(thunksread^) and $80000000 <> 0) then<br /> thunkswrite^ := GetProcAddress(dllh,pchar(cardinal(thunksread^) and $FFFF)) else<br /> thunkswrite^ := GetProcAddress(dllh,pchar(integer(dllbasep)+integer(thunksread^)+2));<br /> VirtualProtect(thunkswrite,4,old,old);<br /> end;<br /> inc(thunksread,1);<br /> inc(thunkswrite,1);<br /> end;<br /> myimport := pointer(integer(myimport)+sizeof(timportblock));<br /> end;<br /> end;</p> <p>function memLoadLibrary(pLib: Pointer): DWord;<br /> var<br /> DllMain : function (dwHandle, dwReason, dwReserved: DWord): DWord; stdcall;<br /> IDH : PImageDosHeader;<br /> INH : PImageNtHeaders;<br /> SEC : PImageSectionHeader;<br /> dwSecCount : DWord;<br /> dwLen : DWord;<br /> dwmemsize : DWord;<br /> i : Integer;<br /> pAll : Pointer;<br /> begin<br /> Result := 0;<br /> IDH := pLib;<br /> if isBadReadPtr(IDH, SizeOf(TImageDosHeader)) or (IDH^.e_magic <> IMAGE_DOS_SIGNATURE) then<br /> Exit;<br /> INH := pointer(cardinal(pLib)+cardinal(IDH^._lfanew));<br /> if isBadReadPtr(INH, SizeOf(TImageNtHeaders)) or (INH^.Signature <> IMAGE_NT_SIGNATURE) then<br /> Exit;<br /> // if (pReserved <> nil) then<br /> // dwLen := Length(pReserved)+1<br /> // else<br /> dwLen := 0;<br /> SEC := Pointer(Integer(INH)+SizeOf(TImageNtHeaders));<br /> dwMemSize := INH^.OptionalHeader.SizeOfImage;<br /> if (dwMemSize = 0) then Exit;<br /> pAll := VirtualAlloc(nil,dwMemSize+dwLen,MEM_COMMIT or MEM_RESERVE,PAGE_EXECUTE_READWRITE);<br /> if (pAll = nil) then Exit;<br /> dwSecCount := INH^.FileHeader.NumberOfSections;<br /> CopyMemory(pAll,IDH,DWord(SEC)-DWord(IDH)+dwSecCount*SizeOf(TImageSectionHeader));<br /> // CopyMemory(Pointer(DWord(pAll) + dwMemSize),pReserved,dwLen-1);<br /> CopyMemory(Pointer(DWord(pAll) + dwMemSize),nil,dwLen-1);<br /> for i := 0 to dwSecCount-1 do<br /> begin<br /> CopyMemory(Pointer(DWord(pAll)+SEC^.VirtualAddress),<br /> Pointer(DWord(pLib)+DWord(SEC^.PointerToRawData)),<br /> SEC^.SizeOfRawData);<br /> SEC := Pointer(Integer(SEC)+SizeOf(TImageSectionHeader));<br /> end;<br /> if (INH^.OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC].VirtualAddress <> 0) then<br /> ChangeReloc(Pointer(INH^.OptionalHeader.ImageBase),<br /> pAll,<br /> Pointer(DWord(pAll)+INH^.OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC].VirtualAddress),<br /> INH^.OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC].Size);<br /> CreateImportTable(pAll, Pointer(DWord(pAll)+INH^.OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].VirtualAddress));<br /> @DllMain := Pointer(INH^.OptionalHeader.AddressOfEntryPoint+DWord(pAll));<br /> // if (INH^.OptionalHeader.AddressOfEntryPoint <> 0) and (bDllMain) then<br /> if INH^.OptionalHeader.AddressOfEntryPoint <> 0 then<br /> begin<br /> try<br /> // if (pReserved <> nil) then<br /> // DllMain(DWord(pAll),DLL_PROCESS_ATTACH,DWord(pAll)+dwMemSize)<br /> // else<br /> DllMain(DWord(pAll),DLL_PROCESS_ATTACH,0);<br /> except<br /> end;<br /> end;<br /> Result := DWord(pAll);<br /> end;</p> <p>function memFreeLibrary(dwHandle: DWord): Boolean;<br /> var<br /> IDH: PImageDosHeader;<br /> INH: PImageNTHeaders;<br /> begin<br /> Result := false;<br /> if (dwHandle = 0) then<br /> Exit;<br /> IDH := Pointer(dwHandle);<br /> if (IDH^.e_magic <> IMAGE_DOS_SIGNATURE) then<br /> Exit;<br /> INH := Pointer(DWord(IDH^._lfanew)+DWord(IDH));<br /> if (INH^.Signature <> IMAGE_NT_SIGNATURE) then<br /> Exit;<br /> if VirtualFree(Pointer(dwHandle),INH^.OptionalHeader.SizeOfImage,MEM_DECOMMIT) then<br /> Result := True;<br /> end;</p> <p>function memGetProcAddress(dwLibHandle: DWord; pFunctionName: PChar): Pointer; stdcall;<br /> var<br /> NtHeader : PImageNtHeaders;<br /> DosHeader : PImageDosHeader;<br /> DataDirectory : PImageDataDirectory;<br /> ExportDirectory : PImageExportDirectory;<br /> i : Integer;<br /> iExportOrdinal : Integer;<br /> ExportName : String;<br /> dwPosDot : DWord;<br /> dwNewmodule : DWord;<br /> pFirstExportName : Pointer;<br /> pFirstExportAddress: Pointer;<br /> pFirstExportOrdinal: Pointer;<br /> pExportAddr : PDWord;<br /> pExportNameNow : PDWord;<br /> pExportOrdinalNow : PWord;<br /> begin<br /> Result := nil;<br /> if pFunctionName = nil then Exit;<br /> DosHeader := Pointer(dwLibHandle);<br /> if isBadReadPtr(DosHeader,sizeof(TImageDosHeader)) or (DosHeader^.e_magic <> IMAGE_DOS_SIGNATURE) then<br /> Exit; {Wrong PE (DOS) Header}<br /> NtHeader := Pointer(DWord(DosHeader^._lfanew)+DWord(DosHeader));<br /> if isBadReadPtr(NtHeader, sizeof(TImageNTHeaders)) or (NtHeader^.Signature <> IMAGE_NT_SIGNATURE) then<br /> Exit; {Wrong PW (NT) Header}<br /> DataDirectory := @NtHeader^.OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT];<br /> if (DataDirectory = nil) or (DataDirectory^.VirtualAddress = 0) then<br /> Exit; {Library has no exporttable}<br /> ExportDirectory := Pointer(DWord(DosHeader) + DWord(DataDirectory^.VirtualAddress));<br /> if isBadReadPtr(ExportDirectory,SizeOf(TImageExportDirectory)) then<br /> Exit;<br /> pFirstExportName := Pointer(DWord(ExportDirectory^.AddressOfNames)+DWord(DosHeader));<br /> pFirstExportOrdinal := Pointer(DWord(ExportDirectory^.AddressOfNameOrdinals)+DWord(DosHeader));<br /> pFirstExportAddress := Pointer(DWord(ExportDirectory^.AddressOfFunctions)+DWord(DosHeader));<br /> if (integer(pFunctionName) > $FFFF) then {is FunctionName a PChar?}<br /> begin<br /> iExportOrdinal := -1; {if we dont find the correct ExportOrdinal}<br /> for i := 0 to ExportDirectory^.NumberOfNames-1 do {for each export do}<br /> begin<br /> pExportNameNow := Pointer(Integer(pFirstExportName)+SizeOf(Pointer)*i);<br /> if (not isBadReadPtr(pExportNameNow,SizeOf(DWord))) then<br /> begin<br /> ExportName := PChar(pExportNameNow^+ DWord(DosHeader));<br /> if (ExportName = pFunctionName) then {is it the export we search? Calculate the ordinal.}<br /> begin<br /> pExportOrdinalNow := Pointer(Integer(pFirstExportOrdinal)+SizeOf(Word)*i);<br /> if (not isBadReadPtr(pExportOrdinalNow,SizeOf(Word))) then<br /> iExportOrdinal := pExportOrdinalNow^;<br /> end;<br /> end;<br /> end;<br /> end else{no PChar, calculate the ordinal directly}<br /> iExportOrdinal := DWord(pFunctionName)-DWord(ExportDirectory^.Base);<br /> if (iExportOrdinal < 0) or (iExportOrdinal > Integer(ExportDirectory^.NumberOfFunctions)) then<br /> Exit; {havent found the ordinal}<br /> pExportAddr := Pointer(iExportOrdinal*4+Integer(pFirstExportAddress));<br /> if (isBadReadPtr(pExportAddr,SizeOf(DWord))) then<br /> Exit;<br /> {Is the Export outside the ExportSection? If not its NT spezific forwared function}<br /> if (pExportAddr^ < DWord(DataDirectory^.VirtualAddress)) or<br /> (pExportAddr^ > DWord(DataDirectory^.VirtualAddress+DataDirectory^.Size)) then<br /> begin<br /> if (pExportAddr^ <> 0) then {calculate export address}<br /> Result := Pointer(pExportAddr^+DWord(DosHeader));<br /> end<br /> else<br /> begin {forwarded function (like kernel32.EnterCriticalSection -> NTDLL.RtlEnterCriticalSection)}<br /> ExportName := PChar(dwLibHandle+pExportAddr^);<br /> dwPosDot := Pos('.',ExportName);<br /> if (dwPosDot > 0) then<br /> begin<br /> dwNewModule := GetModuleHandle(PChar(Copy(ExportName,1,dwPosDot-1)));<br /> if (dwNewModule = 0) then<br /> dwNewModule := LoadLibrary(PChar(Copy(ExportName,1,dwPosDot-1)));<br /> if (dwNewModule <> 0) then<br /> result := GetProcAddressX(dwNewModule,PChar(Copy(ExportName,dwPosDot+1,Length(ExportName))));<br /> end;<br /> end;<br /> end;<br /> end.