kbeandClaude Opus 4.8 678cb00895 Implement RemoteModule/RemoteFunction and prove x64 ABI at runtime
Task 7.2: export resolution + module/function facade.
- PeHeaderParser.GetExportAddress walks the PE32/PE32+ export directory and
  follows export forwarders (e.g. kernel32!HeapAlloc -> NTDLL.RtlAllocateHeap)
  into other loaded modules; ordinal and unresolvable API-set forwarders throw
  NotSupportedException.
- RemoteModule resolves a module base via Process.Modules (name match tolerant
  of .dll/case); RemoteFunction executes via RemoteThreadExecutor by default,
  exposes Address for pump routing and CreateDelegate<T> for in-process.
- Magic gains a string indexer: magic["user32"]["MessageBoxA"].

Task 3.8: add the missing live-execution ABI test - an SSE callee whose aligned
movaps #GPs unless the stub delivers a 16-byte-aligned stack, combined with a
5th stack argument. Runtime-proves shadow space, alignment, and arg placement.

Tests: 214 passing, 4 skipped.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-22 02:49:51 +02:00
2026-07-21 22:30:10 +02:00
2026-07-21 22:30:10 +02:00
2026-07-21 22:30:10 +02:00
2026-07-21 20:28:59 +00:00
2026-07-21 20:28:59 +00:00
2026-07-21 22:30:10 +02:00

WhiteMagic

Wite Magic is a C# library to read, write and execute remote code into a target process for analysis, debuging and mod creation.

S
Description
Wite Magic is a C# library to read, write and execute remote code into a target process for analysis, debuging and mod creation.
Readme MIT
481 KiB
Languages
C# 100%