From 8b016e4409d4408c74799beb87b5ae428ed130f9 Mon Sep 17 00:00:00 2001 From: boris Date: Sun, 2 Dec 2018 17:36:33 +1300 Subject: homo shit still need to do client injection and finish reloc/import shit on server before i can call my job done --- loader/server/manual_map.hpp | 129 ++++++++++++++----------------------------- 1 file changed, 42 insertions(+), 87 deletions(-) (limited to 'loader/server/manual_map.hpp') diff --git a/loader/server/manual_map.hpp b/loader/server/manual_map.hpp index c23ac90..7431353 100644 --- a/loader/server/manual_map.hpp +++ b/loader/server/manual_map.hpp @@ -1,92 +1,14 @@ #pragma once +// TODO: get stripped down version of what we need and shove it in here +#include + #include #include #include #include #include -// if we compile on linux, we won't have access to windows.h (?) -// i'll put there here just so we can access them anyway -namespace nt { - struct data_directory_t { - uint32_t virtual_address; - uint32_t size; - }; - - struct optional_header_t { - uint16_t magic; - uint8_t major_link_version; - uint8_t minor_link_version; - uint32_t size_of_code; - uint32_t size_of_init_data; - uint32_t size_of_uninit_data; - uint32_t entry_point; - uint32_t base_of_code; - uint32_t base_of_data; - uint32_t image_base; - uint32_t section_align; - uint32_t file_align; - uint16_t major_os_version; - uint16_t minor_os_version; - uint16_t major_img_version; - uint16_t minor_img_version; - uint16_t major_sub_version; - uint16_t minor_sub_version; - uint32_t win32_version; - uint32_t size_image; - uint32_t size_headers; - uint32_t checksum; - uint16_t subsystem; - uint16_t dll_characteristics; - uint32_t size_of_stack_reserve; - uint32_t size_of_stack_commit; - uint32_t size_of_heap_reserve; - uint32_t size_of_heap_commit; - uint32_t ldr_flags; - uint32_t number_of_rva_and_sizes; - data_directory_t data_directory[16]; - }; - - struct file_header_t { - uint16_t machine; - uint16_t number_of_sections; - uint32_t time_stamp; - uint32_t ptr_symbol_table; - uint32_t sym_number; - uint16_t opt_header_size; - uint16_t characteristics; - }; - - struct dos_header_t { - uint16_t e_magic; - uint16_t e_cblp; - uint16_t e_cp; - uint16_t e_crlc; - uint16_t e_cparhdr; - uint16_t e_minalloc; - uint16_t e_maxalloc; - uint16_t e_ss; - uint16_t e_sp; - uint16_t e_csum; - uint16_t e_ip; - uint16_t e_cs; - uint16_t e_lfarlc; - uint16_t e_ovno; - uint16_t e_res[4]; - uint16_t e_oemid; - uint16_t e_oeminfo; - uint16_t e_res2[10]; - int32_t e_lfanew; - }; - - struct nt_headers_t { - uint32_t signature; - file_header_t file_header; - optional_header_t opt_header; - }; -} - // here's the game plan: // - client runs, waits for game to start and whatnot // - we wait for serverbrowser.dll to load (if source game, we should have an option in the game struct to wait for module) @@ -98,24 +20,57 @@ namespace nt { // - server packs shellcode with data from client, sends to client // - client runs shellcode, we're injected namespace inject { + // used as generic wrapper for pe, tells client how much to allocate, etc. class c_pe_file { protected: std::vector< uint8_t > m_file; public: + c_pe_file() = default; c_pe_file(const char *file); bool valid(); uint8_t *data(); size_t size() const; }; - // server part of the manual mapper - class c_map_server { + // used for fixing imports + struct process_export_t { + uint32_t m_hash; + uint32_t m_address; + }; + + // used for writing memory in client + struct memory_page_t { + uint32_t m_address; + uint32_t m_protection; + }; + + // container for sections + using byte_array_t = std::vector; + using memory_section_t = std::pair; + + // used as server wrapper for the manual mapper + class c_mapper { protected: - using section_data_t = std::vector< uint8_t >; - using section_t = std::pair< uint32_t /* address */, section_data_t >; - - std::vector< section_t > m_sections; + std::vector m_exports; + std::vector m_sections; + + c_pe_file m_pe; + + private: + bool process_reloc(uint32_t remote_address); + bool process_imports(uint32_t remote_address); + public: + c_mapper() = default; + c_mapper(c_pe_file &pe_file); + + // returns size of module to allocate on client + size_t initialise(std::vector &exports); + + // handles reloc and fixing imports + bool process_pe_file(uint32_t remote_address); + // returns all sections + std::vector get_pe_sections(); }; } \ No newline at end of file -- cgit v1.2.3