109 lines
2.2 KiB
C
109 lines
2.2 KiB
C
#define DEFAULT_BUFLEN 2096
|
|
#define DEFAULT_PORT "1911"
|
|
|
|
// Request Types
|
|
#define EXECUTE 0x0
|
|
#define GO 0x1
|
|
#define BREAK 0x2
|
|
#define RESTART 0x3
|
|
#define ADDBUF 0x4
|
|
|
|
// Corruption Types
|
|
#define CLEAN 0x0
|
|
#define TOUPPER 0x1
|
|
#define TOLOWER 0x2
|
|
#define TOUNICODE 0x3
|
|
#define NONSTD 0x4
|
|
#define TRUNCATED 0x5
|
|
|
|
struct debugState {
|
|
ULONG currentState;
|
|
};
|
|
|
|
struct requestQueue {
|
|
ULONG length;
|
|
struct request *head;
|
|
};
|
|
|
|
struct request {
|
|
USHORT type;
|
|
USHORT length;
|
|
BYTE *data;
|
|
|
|
struct request *next;
|
|
};
|
|
|
|
struct requestHeader {
|
|
USHORT type;
|
|
USHORT length;
|
|
};
|
|
|
|
struct trackedBuf {
|
|
char *bufName;
|
|
char *bufPatt;
|
|
DWORD bufSize;
|
|
USHORT found;
|
|
|
|
struct bufInstance *instances;
|
|
struct trackedBuf *next;
|
|
struct trackedBuf *prev;
|
|
};
|
|
|
|
struct bufInstance {
|
|
ULONG64 address;
|
|
USHORT corruption;
|
|
ULONG truncLength;
|
|
|
|
struct bufInstance *next;
|
|
};
|
|
|
|
struct trackedVal {
|
|
char *valName;
|
|
BYTE valSize;
|
|
ULONG candidates;
|
|
|
|
struct valInstance *instances;
|
|
struct trackedVal *next;
|
|
};
|
|
|
|
struct valInstance {
|
|
ULONG64 address;
|
|
|
|
struct valInstance *next;
|
|
};
|
|
|
|
struct corruption {
|
|
DWORD offset;
|
|
BYTE value;
|
|
BOOL seenAgain;
|
|
BOOL seenBefore;
|
|
};
|
|
|
|
|
|
void helpJutsu(void);
|
|
void bindJutsu(char *);
|
|
void searchOpcodes(char *);
|
|
void searchVtptr(DWORD, char *);
|
|
DWORD WINAPI listenJutsu(LPVOID lpvParam);
|
|
void parseJutsu(char *, ULONG);
|
|
void identBufJutsu(char *, char *, char *, DWORD, DWORD);
|
|
void rmBufJutsu(char *);
|
|
void listTrackedBufJutsu(void);
|
|
void showRequestsJutsu(void);
|
|
void hunterJutsu(void);
|
|
void returnAddressHuntJutsu(void);
|
|
void trackValJutsu(char *name, DWORD size, DWORD value);
|
|
void listTrackedVals(void);
|
|
void listTrackedValByName(char *name);
|
|
ULONG64 allocateMemoryBlock(unsigned long);
|
|
ULONG64 searchMemory(unsigned char * byteBuffer, unsigned long length, ULONG64 *addressHit);
|
|
DWORD findAllVals(unsigned char *byteBuffer, BYTE size, struct valInstance **instance);
|
|
void memDiffJutsu(char *inputType, DWORD size, char *input, ULONG64 address);
|
|
|
|
// Handlers
|
|
void executeJutsu(struct request *);
|
|
void goJutsu(struct request *);
|
|
void breakJutsu(struct request *);
|
|
void restartJutsu(struct request *);
|
|
void addbufJutsu(struct request *);
|