Comments (7)
What exactly is the previous
and what is this
version?
from memorymodule.
the version 0.0.3 is work very good sir. why in this version cant load kernel32.dll from memory ?
from memorymodule.
Windows 10 trying to load Kernel32.dll gives me ERROR_BAD_EXE_FORMAT at 512th line in MemoryModule.h :
GetNativeSystemInfo(&sysInfo);
alignedImageSize = AlignValueUp(old_header->OptionalHeader.SizeOfImage, sysInfo.dwPageSize);
if (alignedImageSize != AlignValueUp(lastSectionEnd, sysInfo.dwPageSize)) {
SetLastError(ERROR_BAD_EXE_FORMAT);
return NULL;
}
"%1 is not a valid Win32 application."
Shell32.dll loads and run fine.
MemoryModule loads the kernel32.dll without any problem if I just comment out that if check.
from memorymodule.
Yes, I have the same problem when load "ntdll.dll" on win7 x64.
It seems the alignment checking are failed, due to old_header->OptionalHeader.SectionAlignment is 0x1000 for normal dlls, but for ntdll is 0x10000, and the kernel32 is also 0x10000!
the previous version don't have AlignValueUp
stuff, so should be work.
from memorymodule.
Why do you want to load ntdll.dll or kernel32.dll into any running process?
These are the first DLLs which Windows loads into ANY process as the first DLLs when the process is started.
Use GetModuleHandle("ntdll.dll") or GetModuleHandle("kernel32.dll") instead!
from memorymodule.
Very interesting what is the purpose to load kernel32 or ntdll with MemoryModule?
from memorymodule.
Hello, sorry for late reply.
Back then, i used to "cheat" on game that using nProtect. Yes it can direct syscall, but im too lazy writing shellcode for different Windows. xD
from memorymodule.
Related Issues (20)
- Create Activation Context Implementation (with code)
- Bug results in crash when loading some DLLs. (with code fix!) HOT 4
- Starting Calc.exe fails (partial fix with code) HOT 2
- PDB Files Not Loaded for DLL's
- running the FARPROC type function fails
- Memory on kernel
- can MemoryCallEntryPoint accept parameters? just like a command line with parameters?
- c# compiled exe load supported ? HOT 1
- 64-bit DLL compiled by G++ failed to load. HOT 1
- cannot load DLL that use OpenSSL? HOT 2
- Link with dllloader
- new failed to allocate memory
- BUG in FinalizeSection
- .pyd files from Python - MemoryModule HOT 5
- Use Unicode version of LoadLibrary HOT 2
- Support for VirtualMachine Libraries
- Can not use CString in vs2015 and newer version , it seems like dynamiclly load Thread Local Storage can not be supported in MemmoryModule??
- Creation of Rust bindings
- MemoryGetProcAddress fails to import a function by ordinal number if dll has no exported names HOT 1
- Need to use it in C# with and unmanaged dll HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from memorymodule.