Repository navigation
Expand file tree
/
Copy pathdetourxs.h
More file actions
executable file
·91 lines (76 loc) · 2.24 KB
/
Copy pathdetourxs.h
File metadata and controls
executable file
·91 lines (76 loc) · 2.24 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
/*
DetourXS v2 by Dominic Tobias
Revision 1 (29/03/2011): Fixed potential bug with relative near recursion in 64bit
Revision 2 (30/03/2011): Couple of semantic changes, added FlushInstructionCache
dominictobias.com
*/
#ifndef __DETOURXS_H
#define __DETOURXS_H
#include <Windows.h>
#include <vector>
#include <algorithm>
#if !defined(_M_AMD64) && !defined(_M_IX86)
#error "_M_AMD64 or _M_IX86 must be defined"
#endif
#ifdef _M_IX86
#pragma comment(lib, "DetourXS/LDE64")
extern "C" size_t __stdcall LDE(const LPVOID lpData, unsigned int size);
#else
#pragma comment(lib, "DetourXS/LDE64x64")
extern "C" size_t __fastcall LDE(const LPVOID lpData, unsigned int size);
#endif
class DetourXS
{
public:
static const size_t relativeJmpSize = 1 + sizeof(DWORD);
static const size_t absoluteJmpSize = 2 + sizeof(DWORD) + sizeof(DWORD_PTR);
enum JmpType : size_t
{
Relative = relativeJmpSize,
Absolute = absoluteJmpSize
};
public:
DetourXS();
DetourXS(LPVOID lpFuncOrig, LPVOID lpFuncDetour);
~DetourXS();
BOOL Create(const LPVOID lpFuncOrig, const LPVOID lpFuncDetour);
BOOL Destroy();
private:
LPVOID RecurseJumps(LPVOID lpAddr);
size_t GetDetourLenAuto(const LPVOID lpStart, JmpType jmpType);
void WriteJump(const LPBYTE lpbFrom, const LPBYTE lpbTo);
void WriteJump(const LPBYTE lpbFrom, const LPBYTE lpbTo, JmpType jmpType);
JmpType GetJmpType(const LPBYTE lpbFrom, const LPBYTE lpbTo);
LPVOID ChainedTo(LPVOID lpFunc);
public:
LPVOID GetTrampoline()
{
return m_trampoline.empty() ? nullptr : m_trampoline.data();
}
size_t GetDetourLen()
{
return m_detourLen;
}
BOOL Created()
{
return m_Created;
}
// Use only if you know what you're doing. You are not guaranteed the function address is
// where the detour will actually take place if you are chaining detours or the function
// starts with a jump. Use empty constructor and call before Create.
void SetDetourLen(size_t len)
{
m_detourLen = len;
}
private:
LPVOID m_lpFuncOrig;
LPVOID m_lpFuncDetour;
LPBYTE m_lpbFuncOrig;
LPBYTE m_lpbFuncDetour;
JmpType m_OrigJmp;
JmpType m_TrampJmp;
std::vector<BYTE> m_trampoline;
size_t m_detourLen;
BOOL m_Created;
};
#endif // __DETOURXS_H