/*
* @Author: lmintlcx
* @Date: 2018-06-28 13:30:04
* @Description: Inject assembly language.
*/
#pragma once
#include <initializer_list>
namespace Pt
{
enum class Reg : unsigned int
{
EAX = 0,
EBX,
ECX,
EDX,
ESI,
EDI,
EBP,
ESP,
};
class Code
{
public:
Code();
~Code();
void asm_init();
void asm_add_byte(unsigned char);
void asm_add_word(unsigned short);
void asm_add_dword(unsigned int);
void asm_add_list(std::initializer_list<unsigned char>);
template <typename... Args>
void asm_add_list(Args...);
void asm_push(int);
void asm_mov_exx(Reg, int);
void asm_add_exx(Reg, int);
void asm_mov_exx_dword_ptr(Reg, int);
void asm_mov_exx_dword_ptr_exx_add(Reg, int);
void asm_push_exx(Reg);
void asm_pop_exx(Reg);
void asm_call(int);
void asm_ret();
void asm_code_inject(HANDLE);
protected:
unsigned char *code;
unsigned int length;
};
template <typename... Args>
void Code::asm_add_list(Args... value)
{
asm_add_list({static_cast<unsigned char>(value)...});
}
} // namespace Pt
code.h
#include <iostream>
#include <cassert>
#include <Windows.h>
#include "src/code.h"
namespace Pt
{
Code::Code()
{
unsigned int page = 256; // 1MB
code = new unsigned char[4096 * page];
length = 0;
}
Code::~Code()
{
delete[] code;
}
void Code::asm_init()
{
length = 0;
}
void Code::asm_add_byte(unsigned char value)
{
code[length] = value;
length += 1;
}
void Code::asm_add_word(unsigned short value)
{
(unsigned short &)code[length] = value;
length += 2;
}
void Code::asm_add_dword(unsigned int value)
{
(unsigned int &)code[length] = value;
length += 4;
}
void Code::asm_add_list(std::initializer_list<unsigned char> value)
{
for (auto it = value.begin(); it != value.end(); it++)
asm_add_byte(*it);
}
void Code::asm_push(int value)
{
asm_add_byte((unsigned char)(0x68));
asm_add_dword(value);
}
void Code::asm_mov_exx(Reg reg, int value)
{
unsigned char mov_exx[] = {0xb8, 0xbb, 0xb9, 0xba, 0xbe, 0xbf, 0xbd, 0xbc};
asm_add_byte(mov_exx[static_cast<unsigned int>(reg)]);
asm_add_dword(value);
}
void Code::asm_add_exx(Reg reg, int value)
{
unsigned char add_exx[] = {0x05, 0xc3, 0xc1, 0xc2, 0xc6, 0xc7, 0xc5, 0xc4};
if (reg != Reg::EAX)
asm_add_byte((unsigned char)(0x81));
asm_add_byte(add_exx[static_cast<unsigned int>(reg)]);
asm_add_dword(value);
}
void Code::asm_mov_exx_dword_ptr(Reg reg, int value)
{
unsigned char mov_exx_dword_ptr[] = {0xa1, 0x1d, 0x0d, 0x15, 0x35, 0x3d, 0x2d, 0x25};
asm_add_byte((unsigned char)(0x3e));
if (reg != Reg::EAX)
asm_add_byte((unsigned char)(0x8b));
asm_add_byte(mov_exx_dword_ptr[static_cast<unsigned int>(reg)]);
asm_add_dword(value);
}
void Code::asm_mov_exx_dword_ptr_exx_add(Reg reg, int value)
{
unsigned char mov_exx_dword_ptr_exx_add[] = {0x80, 0x9b, 0x89, 0x92, 0xb6, 0xbf, 0xad, 0xa4};
asm_add_byte((unsigned char)(0x8b));
asm_add_byte(mov_exx_dword_ptr_exx_add[static_cast<unsigned int>(reg)]);
if (reg == Reg::ESP)
asm_add_byte((unsigned char)(0x24));
asm_add_dword(value);
}
void Code::asm_push_exx(Reg reg)
{
unsigned char push_exx[] = {0x50, 0x53, 0x51, 0x52, 0x56, 0x57, 0x55, 0x54};
asm_add_byte(push_exx[static_cast<unsigned int>(reg)]);
}
void Code::asm_pop_exx(Reg reg)
{
unsigned char pop_exx[] = {0x58, 0x5b, 0x59, 0x5a, 0x5e, 0x5f, 0x5d, 0x5c};
asm_add_byte(pop_exx[static_cast<unsigned int>(reg)]);
}
void Code::asm_call(int addr)
{
asm_add_byte((unsigned char)(0xe8));
asm_add_dword((unsigned int)(0x00000002));
asm_add_word((unsigned short)(0x06eb));
asm_push(addr);
asm_ret();
}
void Code::asm_ret()
{
asm_add_byte((unsigned char)(0xc3));
}
void Code::asm_code_inject(HANDLE handle)
{
LPVOID addr = VirtualAllocEx(handle, nullptr, this->length, MEM_COMMIT, PAGE_EXECUTE_READWRITE);
if (addr == nullptr)
return;
DWORD write_size = 0;
BOOL ret = WriteProcessMemory(handle, addr, this->code, this->length, &write_size);
if (ret == 0 || write_size != this->length)
{
VirtualFreeEx(handle, addr, 0, MEM_RELEASE);
return;
}
HANDLE thread = CreateRemoteThread(handle, nullptr, 0, LPTHREAD_START_ROUTINE(addr), nullptr, 0, nullptr);
if (thread == nullptr)
{
VirtualFreeEx(handle, addr, 0, MEM_RELEASE);
return;
}
[[maybe_unused]] DWORD wait_status = WaitForSingleObject(thread, INFINITE);
CloseHandle(thread);
VirtualFreeEx(handle, addr, 0, MEM_RELEASE);
#ifdef _DEBUG
std::wcout << L"Wait Status: " << wait_status << std::endl;
std::wcout << L"Asm Code: ";
for (size_t i = 0; i < this->length; i++)
std::cout << std::hex << int(code[i]) << " ";
std::cout << std::endl;
std::wcout << L"Code Length: " << std::dec << this->length << std::endl;
#endif
}
} // namespace Pt
code.cpp
网上的代码，求打包
不知道你这个问题是否已经解决, 如果还没有解决的话: