Skip to content

Commit 00819ee

Browse files
committed
Support for 64bit Exe. Fix the trouble in IAT apply & File Mapping
1 parent 30a23ee commit 00819ee

38 files changed

+74
-10
lines changed

32&64bit/32bit.exe

49.3 KB
Binary file not shown.

32&64bit/64bit.exe

52.6 KB
Binary file not shown.

32&64bit/PoC.cpp

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
#include <windows.h>
2+
3+
int main(void) {
4+
MessageBoxA(0, "Hello", "World", 0);
5+
}
38.5 KB
Binary file not shown.
35.3 MB
Binary file not shown.
3.56 MB
Binary file not shown.
Binary file not shown.

RunPE-In-Memory/RunPEinMemory.sln

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,12 +7,18 @@ Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "RunPEinMemory", "RunPEinMem
77
EndProject
88
Global
99
GlobalSection(SolutionConfigurationPlatforms) = preSolution
10+
Debug|x64 = Debug|x64
1011
Debug|x86 = Debug|x86
12+
Release|x64 = Release|x64
1113
Release|x86 = Release|x86
1214
EndGlobalSection
1315
GlobalSection(ProjectConfigurationPlatforms) = postSolution
16+
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Debug|x64.ActiveCfg = Debug|x64
17+
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Debug|x64.Build.0 = Debug|x64
1418
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Debug|x86.ActiveCfg = Debug|Win32
1519
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Debug|x86.Build.0 = Debug|Win32
20+
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Release|x64.ActiveCfg = Release|x64
21+
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Release|x64.Build.0 = Release|x64
1622
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Release|x86.ActiveCfg = Release|Win32
1723
{7868D0F4-3494-4F9D-8485-89F3F41594E8}.Release|x86.Build.0 = Release|Win32
1824
EndGlobalSection
Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
 RunPEinMemory.cpp
2+
c:\users\exploit\desktop\runpe-in-memory-master\runpe-in-memory\runpeinmemory\pebase.hpp(17): warning C4244: '引數': 將 'LONGLONG' 轉換為 'size_t',由於類型不同,可能導致資料遺失
3+
c:\users\exploit\desktop\runpe-in-memory-master\runpe-in-memory\runpeinmemory\pebase.hpp(18): warning C4244: '引數': 將 'LONGLONG' 轉換為 'size_t',由於類型不同,可能導致資料遺失
4+
c:\users\exploit\desktop\runpe-in-memory-master\runpe-in-memory\runpeinmemory\fixiat.hpp(37): error C3861: 'PRINTF': 找不到識別項
5+
c:\users\exploit\desktop\runpe-in-memory-master\runpe-in-memory\runpeinmemory\fixreloc.hpp(46): warning C4477: 'printf' : 格式字串 '%x' 需要 'unsigned int' 類型的引數,但 variadic 引數 1 的類型為 'DWORD *'
6+
c:\users\exploit\desktop\runpe-in-memory-master\runpe-in-memory\runpeinmemory\fixreloc.hpp(47): warning C4244: '=': 將 'ULONGLONG' 轉換為 'DWORD',由於類型不同,可能導致資料遺失
7+
c:\users\exploit\desktop\runpe-in-memory-master\runpe-in-memory\runpeinmemory\runpeinmemory.cpp(22): warning C4477: 'printf' : 格式字串 '%x' 需要 'unsigned int' 類型的引數,但 variadic 引數 1 的類型為 'LPVOID'
8+
c:\users\exploit\desktop\runpe-in-memory-master\runpe-in-memory\runpeinmemory\runpeinmemory.cpp(27): warning C4477: 'printf' : 格式字串 '%x' 需要 'unsigned int' 類型的引數,但 variadic 引數 1 的類型為 'LPVOID'
2.94 MB
Binary file not shown.

0 commit comments

Comments
 (0)