void DumpStrings(hadesmem::Process const& process,
hadesmem::PeFile const& pe_file)
{
std::wostream& out = GetOutputStreamW();
std::uint8_t* const file_beg = static_cast<std::uint8_t*>(pe_file.GetBase());
void* const file_end = file_beg + pe_file.GetSize();
// TODO: Fix to not require multiple passes.
WriteNewline(out);
WriteNormal(out, L"Narrow Strings:", 1);
WriteNewline(out);
DumpStringsImpl(process, pe_file, file_beg, file_end, false);
WriteNewline(out);
WriteNormal(out, L"Wide Strings (Pass 1):", 1);
WriteNewline(out);
DumpStringsImpl(process, pe_file, file_beg, file_end, true);
WriteNewline(out);
WriteNormal(out, L"Wide Strings (Pass 2):", 1);
WriteNewline(out);
DumpStringsImpl(process, pe_file, file_beg + 1, file_end, true);
}
void TestDosHeader()
{
hadesmem::Process const process(::GetCurrentProcessId());
hadesmem::PeFile pe_file_1(
process, ::GetModuleHandleW(nullptr), hadesmem::PeFileType::Image, 0);
hadesmem::DosHeader dos_header_1(process, pe_file_1);
hadesmem::DosHeader dos_header_2(dos_header_1);
BOOST_TEST_EQ(dos_header_1, dos_header_2);
dos_header_1 = dos_header_2;
BOOST_TEST_EQ(dos_header_1, dos_header_2);
hadesmem::DosHeader dos_header_3(std::move(dos_header_2));
BOOST_TEST_EQ(dos_header_3, dos_header_1);
dos_header_2 = std::move(dos_header_3);
BOOST_TEST_EQ(dos_header_1, dos_header_2);
hadesmem::ModuleList modules(process);
for (auto const& mod : modules)
{
hadesmem::PeFile const cur_pe_file(
process, mod.GetHandle(), hadesmem::PeFileType::Image, 0);
hadesmem::DosHeader cur_dos_header(process, cur_pe_file);
auto const dos_header_raw =
hadesmem::Read<IMAGE_DOS_HEADER>(process, cur_dos_header.GetBase());
BOOST_TEST_EQ(cur_dos_header.IsValid(), true);
cur_dos_header.EnsureValid();
cur_dos_header.SetMagic(cur_dos_header.GetMagic());
cur_dos_header.SetBytesOnLastPage(cur_dos_header.GetBytesOnLastPage());
cur_dos_header.SetPagesInFile(cur_dos_header.GetPagesInFile());
cur_dos_header.SetRelocations(cur_dos_header.GetRelocations());
cur_dos_header.SetSizeOfHeaderInParagraphs(
cur_dos_header.GetSizeOfHeaderInParagraphs());
cur_dos_header.SetMinExtraParagraphs(
cur_dos_header.GetMinExtraParagraphs());
cur_dos_header.SetMaxExtraParagraphs(
cur_dos_header.GetMaxExtraParagraphs());
cur_dos_header.SetInitialSS(cur_dos_header.GetInitialSS());
cur_dos_header.SetInitialSP(cur_dos_header.GetInitialSP());
cur_dos_header.SetChecksum(cur_dos_header.GetChecksum());
cur_dos_header.SetInitialIP(cur_dos_header.GetInitialIP());
cur_dos_header.SetInitialCS(cur_dos_header.GetInitialCS());
cur_dos_header.SetRelocTableFileAddr(
cur_dos_header.GetRelocTableFileAddr());
cur_dos_header.SetOverlayNum(cur_dos_header.GetOverlayNum());
cur_dos_header.SetReservedWords1(cur_dos_header.GetReservedWords1());
cur_dos_header.SetOEMID(cur_dos_header.GetOEMID());
cur_dos_header.SetOEMInfo(cur_dos_header.GetOEMInfo());
cur_dos_header.SetReservedWords2(cur_dos_header.GetReservedWords2());
cur_dos_header.SetNewHeaderOffset(cur_dos_header.GetNewHeaderOffset());
cur_dos_header.UpdateWrite();
cur_dos_header.UpdateRead();
auto const dos_header_raw_new =
hadesmem::Read<IMAGE_DOS_HEADER>(process, cur_pe_file.GetBase());
BOOST_TEST_EQ(
std::memcmp(&dos_header_raw, &dos_header_raw_new, sizeof(dos_header_raw)),
0);
std::stringstream test_str_1;
test_str_1.imbue(std::locale::classic());
test_str_1 << cur_dos_header;
std::stringstream test_str_2;
test_str_2.imbue(std::locale::classic());
test_str_2 << cur_dos_header.GetBase();
BOOST_TEST_EQ(test_str_1.str(), test_str_2.str());
if (mod.GetHandle() != ::GetModuleHandleW(L"ntdll"))
{
hadesmem::PeFile const pe_file_ntdll(
process, ::GetModuleHandleW(L"ntdll"), hadesmem::PeFileType::Image, 0);
hadesmem::DosHeader const dos_header_ntdll(process, pe_file_ntdll);
std::stringstream test_str_3;
test_str_3.imbue(std::locale::classic());
test_str_3 << dos_header_ntdll.GetBase();
BOOST_TEST_NE(test_str_1.str(), test_str_3.str());
}
}
}
