include/detours/detours.h

   1 //////////////////////////////////////////////////////////////////////////////
   2 //
   3 //  File:       detours.h
   4 //  Module:     detours.lib
   5 //
   6 //  Detours for binary functions.  Version 1.5 (Build 46)
   7 //
   8 //  Copyright 1995-2001, Microsoft Corporation
   9 //
  10
  11 #pragma once
  12 #ifndef _DETOURS_H_
  13 #define _DETOURS_H_
  14
  15 #pragma comment(lib, "detours")
  16
  17 //////////////////////////////////////////////////////////////////////////////
  18 //
  19 #ifndef GUID_DEFINED
  20 #define GUID_DEFINED
  21 typedef struct  _GUID
  22 {
  23     DWORD Data1;
  24     WORD Data2;
  25     WORD Data3;
  26     BYTE Data4[ 8 ];
  27 } GUID;
  28 #endif // !GUID_DEFINED
  29
  30 #if defined(__cplusplus)
  31 #ifndef _REFGUID_DEFINED
  32 #define _REFGUID_DEFINED
  33 #define REFGUID             const GUID &
  34 #endif // !_REFGUID_DEFINED
  35 #else // !__cplusplus
  36 #ifndef _REFGUID_DEFINED
  37 #define _REFGUID_DEFINED
  38 #define REFGUID             const GUID * const
  39 #endif // !_REFGUID_DEFINED
  40 #endif // !__cplusplus
  41 //
  42 //////////////////////////////////////////////////////////////////////////////
  43
  44 #ifdef __cplusplus
  45 extern "C" {
  46 #endif // __cplusplus
  47
  48 /////////////////////////////////////////////////// Instruction Target Macros.
  49 //
  50 #define DETOUR_INSTRUCTION_TARGET_NONE          ((PBYTE)0)
  51 #define DETOUR_INSTRUCTION_TARGET_DYNAMIC       ((PBYTE)~0ul)
  52
  53 /////////////////////////////////////////////////////////// Trampoline Macros.
  54 //
  55 // DETOUR_TRAMPOLINE(trampoline_prototype, target_name)
  56 //
  57 // The naked trampoline must be at least DETOUR_TRAMPOLINE_SIZE bytes.
  58 //
  59 #define DETOUR_TRAMPOLINE_SIZE          32
  60 #define DETOUR_SECTION_HEADER_SIGNATURE 0x00727444   // "Dtr\0"
  61
  62 #define DETOUR_TRAMPOLINE(trampoline,target) \
  63 static PVOID __fastcall _Detours_GetVA_##target(VOID) \
  64 { \
  65     return &target; \
  66 } \
  67 \
  68 __declspec(naked) trampoline \
  69 { \
  70     __asm { nop };\
  71     __asm { nop };\
  72     __asm { call _Detours_GetVA_##target };\
  73     __asm { jmp eax };\
  74     __asm { ret };\
  75     __asm { nop };\
  76     __asm { nop };\
  77     __asm { nop };\
  78     __asm { nop };\
  79     __asm { nop };\
  80     __asm { nop };\
  81     __asm { nop };\
  82     __asm { nop };\
  83     __asm { nop };\
  84     __asm { nop };\
  85     __asm { nop };\
  86     __asm { nop };\
  87     __asm { nop };\
  88     __asm { nop };\
  89     __asm { nop };\
  90     __asm { nop };\
  91     __asm { nop };\
  92     __asm { nop };\
  93     __asm { nop };\
  94     __asm { nop };\
  95     __asm { nop };\
  96     __asm { nop };\
  97 }
  98
  99 #define DETOUR_TRAMPOLINE_EMPTY(trampoline) \
 100 __declspec(naked) trampoline \
 101 { \
 102     __asm { nop };\
 103     __asm { nop };\
 104     __asm { xor eax, eax };\
 105     __asm { mov eax, [eax] };\
 106     __asm { ret };\
 107     __asm { nop };\
 108     __asm { nop };\
 109     __asm { nop };\
 110     __asm { nop };\
 111     __asm { nop };\
 112     __asm { nop };\
 113     __asm { nop };\
 114     __asm { nop };\
 115     __asm { nop };\
 116     __asm { nop };\
 117     __asm { nop };\
 118     __asm { nop };\
 119     __asm { nop };\
 120     __asm { nop };\
 121     __asm { nop };\
 122     __asm { nop };\
 123     __asm { nop };\
 124     __asm { nop };\
 125     __asm { nop };\
 126     __asm { nop };\
 127     __asm { nop };\
 128     __asm { nop };\
 129     __asm { nop };\
 130     __asm { nop };\
 131     __asm { nop };\
 132 }
 133
 134 /////////////////////////////////////////////////////////// Binary Structures.
 135 //
 136 #pragma pack(push, 8)
 137 typedef struct _DETOUR_SECTION_HEADER
 138 {
 139     DWORD       cbHeaderSize;
 140     DWORD       nSignature;
 141     DWORD       nDataOffset;
 142     DWORD       cbDataSize;
 143
 144     DWORD       nOriginalImportVirtualAddress;
 145     DWORD       nOriginalImportSize;
 146     DWORD       nOriginalBoundImportVirtualAddress;
 147     DWORD       nOriginalBoundImportSize;
 148
 149     DWORD       nOriginalIatVirtualAddress;
 150     DWORD       nOriginalIatSize;
 151     DWORD       nOriginalSizeOfImage;
 152     DWORD       nReserve;
 153 } DETOUR_SECTION_HEADER, *PDETOUR_SECTION_HEADER;
 154
 155 typedef struct _DETOUR_SECTION_RECORD
 156 {
 157     DWORD       cbBytes;
 158     DWORD       nReserved;
 159     GUID        guid;
 160 } DETOUR_SECTION_RECORD, *PDETOUR_SECTION_RECORD;
 161 #pragma pack(pop)
 162
 163 #define DETOUR_SECTION_HEADER_DECLARE(cbSectionSize) \
 164 { \
 165       sizeof(DETOUR_SECTION_HEADER),\
 166       DETOUR_SECTION_HEADER_SIGNATURE,\
 167       sizeof(DETOUR_SECTION_HEADER),\
 168       (cbSectionSize),\
 169       \
 170       0,\
 171       0,\
 172       0,\
 173       0,\
 174       \
 175       0,\
 176       0,\
 177       0,\
 178       0,\
 179 }
 180
 181 ///////////////////////////////////////////////////////////// Binary Typedefs.
 182 //
 183 typedef BOOL (CALLBACK *PF_DETOUR_BINARY_BYWAY_CALLBACK)(PVOID pContext,
 184                                                          PCHAR pszFile,
 185                                                          PCHAR *ppszOutFile);
 186 typedef BOOL (CALLBACK *PF_DETOUR_BINARY_FILE_CALLBACK)(PVOID pContext,
 187                                                         PCHAR pszOrigFile,
 188                                                         PCHAR pszFile,
 189                                                         PCHAR *ppszOutFile);
 190 typedef BOOL (CALLBACK *PF_DETOUR_BINARY_SYMBOL_CALLBACK)(PVOID pContext,
 191                                                           DWORD nOrdinal,
 192                                                           PCHAR pszOrigSymbol,
 193                                                           PCHAR pszSymbol,
 194                                                           PCHAR *ppszOutSymbol);
 195 typedef BOOL (CALLBACK *PF_DETOUR_BINARY_FINAL_CALLBACK)(PVOID pContext);
 196 typedef BOOL (CALLBACK *PF_DETOUR_BINARY_EXPORT_CALLBACK)(PVOID pContext,
 197                                                           DWORD nOrdinal,
 198                                                           PCHAR pszName,
 199                                                           PBYTE pbCode);
 200
 201 typedef VOID * PDETOUR_BINARY;
 202 typedef VOID * PDETOUR_LOADED_BINARY;
 203
 204 //////////////////////////////////////////////////////// Trampoline Functions.
 205 //
 206 PBYTE WINAPI DetourFunction(PBYTE pbTargetFunction,
 207                             PBYTE pbDetourFunction);
 208
 209 BOOL WINAPI DetourFunctionWithEmptyTrampoline(PBYTE pbTrampoline,
 210                                               PBYTE pbTarget,
 211                                               PBYTE pbDetour);
 212
 213 BOOL WINAPI DetourFunctionWithEmptyTrampolineEx(PBYTE pbTrampoline,
 214                                                 PBYTE pbTarget,
 215                                                 PBYTE pbDetour,
 216                                                 PBYTE *ppbRealTrampoline,
 217                                                 PBYTE *ppbRealTarget,
 218                                                 PBYTE *ppbRealDetour);
 219
 220 BOOL  WINAPI DetourFunctionWithTrampoline(PBYTE pbTrampoline,
 221                                           PBYTE pbDetour);
 222
 223 BOOL  WINAPI DetourFunctionWithTrampolineEx(PBYTE pbTrampoline,
 224                                             PBYTE pbDetour,
 225                                             PBYTE *ppbRealTrampoline,
 226                                             PBYTE *ppbRealTarget);
 227
 228 BOOL  WINAPI DetourRemove(PBYTE pbTrampoline, PBYTE pbDetour);
 229
 230 ////////////////////////////////////////////////////////////// Code Functions.
 231 //
 232 PBYTE WINAPI DetourFindFunction(PCHAR pszModule, PCHAR pszFunction);
 233 PBYTE WINAPI DetourGetFinalCode(PBYTE pbCode, BOOL fSkipJmp);
 234
 235 PBYTE WINAPI DetourCopyInstruction(PBYTE pbDst, PBYTE pbSrc, PBYTE *ppbTarget);
 236 PBYTE WINAPI DetourCopyInstructionEx(PBYTE pbDst,
 237                                      PBYTE pbSrc,
 238                                      PBYTE *ppbTarget,
 239                                      LONG *plExtra);
 240
 241 ///////////////////////////////////////////////////// Loaded Binary Functions.
 242 //
 243 HMODULE WINAPI DetourEnumerateModules(HMODULE hModuleLast);
 244 PBYTE WINAPI DetourGetEntryPoint(HMODULE hModule);
 245 BOOL WINAPI DetourEnumerateExports(HMODULE hModule,
 246                                    PVOID pContext,
 247                                    PF_DETOUR_BINARY_EXPORT_CALLBACK pfExport);
 248
 249 PBYTE WINAPI DetourFindPayload(HMODULE hModule, REFGUID rguid, DWORD *pcbData);
 250 DWORD WINAPI DetourGetSizeOfPayloads(HMODULE hModule);
 251
 252 ///////////////////////////////////////////////// Persistent Binary Functions.
 253 //
 254 BOOL WINAPI DetourBinaryBindA(PCHAR pszFile, PCHAR pszDll, PCHAR pszPath);
 255 BOOL WINAPI DetourBinaryBindW(PWCHAR pwzFile, PWCHAR pwzDll, PWCHAR pwzPath);
 256 #ifdef UNICODE
 257 #define DetourBinaryBind  DetourBinaryBindW
 258 #else
 259 #define DetourBinaryBind  DetourBinaryBindA
 260 #endif // !UNICODE
 261
 262 PDETOUR_BINARY WINAPI DetourBinaryOpen(HANDLE hFile);
 263 PBYTE WINAPI DetourBinaryEnumeratePayloads(PDETOUR_BINARY pBinary,
 264                                            GUID *pGuid,
 265                                            DWORD *pcbData,
 266                                            DWORD *pnIterator);
 267 PBYTE WINAPI DetourBinaryFindPayload(PDETOUR_BINARY pBinary,
 268                                      REFGUID rguid,
 269                                      DWORD *pcbData);
 270 PBYTE WINAPI DetourBinarySetPayload(PDETOUR_BINARY pBinary,
 271                                     REFGUID rguid,
 272                                     PBYTE pbData,
 273                                     DWORD cbData);
 274 BOOL WINAPI DetourBinaryDeletePayload(PDETOUR_BINARY pBinary, REFGUID rguid);
 275 BOOL WINAPI DetourBinaryPurgePayloads(PDETOUR_BINARY pBinary);
 276 BOOL WINAPI DetourBinaryResetImports(PDETOUR_BINARY pBinary);
 277 BOOL WINAPI DetourBinaryEditImports(PDETOUR_BINARY pBinary,
 278                                     PVOID pContext,
 279                                     PF_DETOUR_BINARY_BYWAY_CALLBACK pfByway,
 280                                     PF_DETOUR_BINARY_FILE_CALLBACK pfFile,
 281                                     PF_DETOUR_BINARY_SYMBOL_CALLBACK pfSymbol,
 282                                     PF_DETOUR_BINARY_FINAL_CALLBACK pfFinal);
 283 BOOL WINAPI DetourBinaryWrite(PDETOUR_BINARY pBinary, HANDLE hFile);
 284 BOOL WINAPI DetourBinaryClose(PDETOUR_BINARY pBinary);
 285
 286 /////////////////////////////////////////////// First Chance Exception Filter.
 287 //
 288 LPTOP_LEVEL_EXCEPTION_FILTER WINAPI
 289 DetourFirstChanceExceptionFilter(LPTOP_LEVEL_EXCEPTION_FILTER lpTopLevelFilter);
 290
 291 ///////////////////////////////////////////////// Create Process & Inject Dll.
 292 //
 293 typedef BOOL (WINAPI *PDETOUR_CREATE_PROCESS_ROUTINEA)
 294     (LPCSTR lpApplicationName,
 295      LPSTR lpCommandLine,
 296      LPSECURITY_ATTRIBUTES lpProcessAttributes,
 297      LPSECURITY_ATTRIBUTES lpThreadAttributes,
 298      BOOL bInheritHandles,
 299      DWORD dwCreationFlags,
 300      LPVOID lpEnvironment,
 301      LPCSTR lpCurrentDirectory,
 302      LPSTARTUPINFOA lpStartupInfo,
 303      LPPROCESS_INFORMATION lpProcessInformation);
 304
 305 typedef BOOL (WINAPI *PDETOUR_CREATE_PROCESS_ROUTINEW)
 306     (LPCWSTR lpApplicationName,
 307      LPWSTR lpCommandLine,
 308      LPSECURITY_ATTRIBUTES lpProcessAttributes,
 309      LPSECURITY_ATTRIBUTES lpThreadAttributes,
 310      BOOL bInheritHandles,
 311      DWORD dwCreationFlags,
 312      LPVOID lpEnvironment,
 313      LPCWSTR lpCurrentDirectory,
 314      LPSTARTUPINFOW lpStartupInfo,
 315      LPPROCESS_INFORMATION lpProcessInformation);
 316
 317 BOOL WINAPI DetourCreateProcessWithDllA(LPCSTR lpApplicationName,
 318                                         LPSTR lpCommandLine,
 319                                         LPSECURITY_ATTRIBUTES lpProcessAttributes,
 320                                         LPSECURITY_ATTRIBUTES lpThreadAttributes,
 321                                         BOOL bInheritHandles,
 322                                         DWORD dwCreationFlags,
 323                                         LPVOID lpEnvironment,
 324                                         LPCSTR lpCurrentDirectory,
 325                                         LPSTARTUPINFOA lpStartupInfo,
 326                                         LPPROCESS_INFORMATION lpProcessInformation,
 327                                         LPCSTR lpDllName,
 328                                         PDETOUR_CREATE_PROCESS_ROUTINEA
 329                                         pfCreateProcessA);
 330
 331 BOOL WINAPI DetourCreateProcessWithDllW(LPCWSTR lpApplicationName,
 332                                         LPWSTR lpCommandLine,
 333                                         LPSECURITY_ATTRIBUTES lpProcessAttributes,
 334                                         LPSECURITY_ATTRIBUTES lpThreadAttributes,
 335                                         BOOL bInheritHandles,
 336                                         DWORD dwCreationFlags,
 337                                         LPVOID lpEnvironment,
 338                                         LPCWSTR lpCurrentDirectory,
 339                                         LPSTARTUPINFOW lpStartupInfo,
 340                                         LPPROCESS_INFORMATION lpProcessInformation,
 341                                         LPCWSTR lpDllName,
 342                                         PDETOUR_CREATE_PROCESS_ROUTINEW
 343                                         pfCreateProcessW);
 344
 345 #ifdef UNICODE
 346 #define DetourCreateProcessWithDll  DetourCreateProcessWithDllW
 347 #define PDETOUR_CREATE_PROCESS_ROUTINE     PDETOUR_CREATE_PROCESS_ROUTINEW
 348 #else
 349 #define DetourCreateProcessWithDll  DetourCreateProcessWithDllA
 350 #define PDETOUR_CREATE_PROCESS_ROUTINE     PDETOUR_CREATE_PROCESS_ROUTINEA
 351 #endif // !UNICODE
 352
 353 BOOL WINAPI DetourContinueProcessWithDllA(HANDLE hProcess, LPCSTR lpDllName);
 354 BOOL WINAPI DetourContinueProcessWithDllW(HANDLE hProcess, LPCWSTR lpDllName);
 355
 356 #ifdef UNICODE
 357 #define DetourContinueProcessWithDll    DetourContinueProcessWithDllW
 358 #else
 359 #define DetourContinueProcessWithDll    DetourContinueProcessWithDllA
 360 #endif // !UNICODE
 361 //
 362 //////////////////////////////////////////////////////////////////////////////
 363 #ifdef __cplusplus
 364 }
 365 #endif // __cplusplus
 366
 367 /////////////////////////////////////////////////////////////////// Old Names.
 368 //
 369 #define ContinueProcessWithDll            DetourContinueProcessWithDll
 370 #define ContinueProcessWithDllA           DetourContinueProcessWithDllA
 371 #define ContinueProcessWithDllW           DetourContinueProcessWithDllW
 372 #define CreateProcessWithDll              DetourCreateProcessWithDll
 373 #define CreateProcessWithDllA             DetourCreateProcessWithDllA
 374 #define CreateProcessWithDllW             DetourCreateProcessWithDllW
 375 #define DETOUR_TRAMPOLINE_WO_TARGET       DETOUR_TRAMPOLINE_EMPTY
 376 #define DetourBinaryPurgePayload          DetourBinaryPurgePayloads
 377 #define DetourEnumerateExportsForInstance DetourEnumerateExports
 378 #define DetourEnumerateInstances          DetourEnumerateModules
 379 #define DetourFindEntryPointForInstance   DetourGetEntryPoint
 380 #define DetourFindFinalCode               DetourGetFinalCode
 381 #define DetourFindPayloadInBinary         DetourFindPayload
 382 #define DetourGetSizeOfBinary             DetourGetSizeOfPayloads
 383 #define DetourRemoveWithTrampoline        DetourRemove
 384 #define PCREATE_PROCESS_ROUTINE           PDETOUR_CREATE_PROCESS_ROUTINE
 385 #define PCREATE_PROCESS_ROUTINEA          PDETOUR_CREATE_PROCESS_ROUTINEA
 386 #define PCREATE_PROCESS_ROUTINEW          PDETOUR_CREATE_PROCESS_ROUTINEW
 387 //
 388
 389 //////////////////////////////////////////////// Detours Internal Definitions.
 390 //
 391 #ifdef __cplusplus
 392 #ifdef DETOURS_INTERNAL
 393
 394 //////////////////////////////////////////////////////////////////////////////
 395 //
 396 #ifdef IMAGEAPI // defined by IMAGEHLP.H
 397 typedef LPAPI_VERSION (NTAPI *PF_ImagehlpApiVersionEx)(LPAPI_VERSION AppVersion);
 398
 399 typedef BOOL (NTAPI *PF_SymInitialize)(IN HANDLE hProcess,
 400                                        IN LPSTR UserSearchPath,
 401                                        IN BOOL fInvadeProcess);
 402 typedef DWORD (NTAPI *PF_SymSetOptions)(IN DWORD SymOptions);
 403 typedef DWORD (NTAPI *PF_SymGetOptions)(VOID);
 404 typedef BOOL (NTAPI *PF_SymLoadModule)(IN HANDLE hProcess,
 405                                        IN HANDLE hFile,
 406                                        IN PSTR ImageName,
 407                                        IN PSTR ModuleName,
 408                                        IN DWORD BaseOfDll,
 409                                        IN DWORD SizeOfDll);
 410 typedef BOOL (NTAPI *PF_SymGetModuleInfo)(IN HANDLE hProcess,
 411                                           IN DWORD dwAddr,
 412                                           OUT PIMAGEHLP_MODULE ModuleInfo);
 413 typedef BOOL (NTAPI *PF_SymGetSymFromName)(IN HANDLE hProcess,
 414                                            IN LPSTR Name,
 415                                            OUT PIMAGEHLP_SYMBOL Symbol);
 416 typedef BOOL (NTAPI *PF_BindImage)(IN LPSTR pszImageName,
 417                                    IN LPSTR pszDllPath,
 418                                    IN LPSTR pszSymbolPath);
 419
 420 typedef struct _DETOUR_SYM_INFO
 421 {
 422     HANDLE                   hProcess;
 423     HMODULE                  hImageHlp;
 424     PF_ImagehlpApiVersionEx  pfImagehlpApiVersionEx;
 425     PF_SymInitialize         pfSymInitialize;
 426     PF_SymSetOptions         pfSymSetOptions;
 427     PF_SymGetOptions         pfSymGetOptions;
 428     PF_SymLoadModule         pfSymLoadModule;
 429     PF_SymGetModuleInfo      pfSymGetModuleInfo;
 430     PF_SymGetSymFromName     pfSymGetSymFromName;
 431     PF_BindImage             pfBindImage;
 432 } DETOUR_SYM_INFO, *PDETOUR_SYM_INFO;
 433
 434 PDETOUR_SYM_INFO DetourLoadImageHlp(VOID);
 435
 436 #endif // IMAGEAPI
 437
 438 //////////////////////////////////////////////////////////////////////////////
 439 //
 440 class CDetourEnableWriteOnCodePage
 441 {
 442 public:
 443     CDetourEnableWriteOnCodePage(PBYTE pbCode, LONG cbCode = DETOUR_TRAMPOLINE_SIZE)
 444     {
 445         m_pbCode = pbCode;
 446         m_cbCode = cbCode;
 447         m_dwOldPerm = 0;
 448         m_hProcess = GetCurrentProcess();
 449
 450         if (m_pbCode && m_cbCode) {
 451             if (!FlushInstructionCache(m_hProcess, pbCode, cbCode)) {
 452                 return;
 453             }
 454             if (!VirtualProtect(pbCode,
 455                                 cbCode,
 456                                 PAGE_EXECUTE_READWRITE,
 457                                 &m_dwOldPerm)) {
 458                 return;
 459             }
 460         }
 461     }
 462
 463     ~CDetourEnableWriteOnCodePage()
 464     {
 465         if (m_dwOldPerm && m_pbCode && m_cbCode) {
 466             DWORD dwTemp = 0;
 467             if (!FlushInstructionCache(m_hProcess, m_pbCode, m_cbCode)) {
 468                 return;
 469             }
 470             if (!VirtualProtect(m_pbCode, m_cbCode, m_dwOldPerm, &dwTemp)) {
 471                 return;
 472             }
 473         }
 474     }
 475
 476     BOOL SetPermission(DWORD dwPerms)
 477     {
 478         if (m_dwOldPerm && m_pbCode && m_cbCode) {
 479             m_dwOldPerm = dwPerms;
 480             return TRUE;
 481         }
 482         return FALSE;
 483     }
 484
 485     BOOL IsValid(VOID)
 486     {
 487         return m_pbCode && m_cbCode && m_dwOldPerm;
 488     }
 489
 490 private:
 491     HANDLE  m_hProcess;
 492     PBYTE   m_pbCode;
 493     LONG    m_cbCode;
 494     DWORD   m_dwOldPerm;
 495 };
 496
 497 //////////////////////////////////////////////////////////////////////////////
 498 //
 499 inline PBYTE DetourGenMovEax(PBYTE pbCode, UINT32 nValue)
 500 {
 501     *pbCode++ = 0xB8;
 502     *((UINT32*&)pbCode)++ = nValue;
 503     return pbCode;
 504 }
 505
 506 inline PBYTE DetourGenMovEbx(PBYTE pbCode, UINT32 nValue)
 507 {
 508     *pbCode++ = 0xBB;
 509     *((UINT32*&)pbCode)++ = nValue;
 510     return pbCode;
 511 }
 512
 513 inline PBYTE DetourGenMovEcx(PBYTE pbCode, UINT32 nValue)
 514 {
 515     *pbCode++ = 0xB9;
 516     *((UINT32*&)pbCode)++ = nValue;
 517     return pbCode;
 518 }
 519
 520 inline PBYTE DetourGenMovEdx(PBYTE pbCode, UINT32 nValue)
 521 {
 522     *pbCode++ = 0xBA;
 523     *((UINT32*&)pbCode)++ = nValue;
 524     return pbCode;
 525 }
 526
 527 inline PBYTE DetourGenMovEsi(PBYTE pbCode, UINT32 nValue)
 528 {
 529     *pbCode++ = 0xBE;
 530     *((UINT32*&)pbCode)++ = nValue;
 531     return pbCode;
 532 }
 533
 534 inline PBYTE DetourGenMovEdi(PBYTE pbCode, UINT32 nValue)
 535 {
 536     *pbCode++ = 0xBF;
 537     *((UINT32*&)pbCode)++ = nValue;
 538     return pbCode;
 539 }
 540
 541 inline PBYTE DetourGenMovEbp(PBYTE pbCode, UINT32 nValue)
 542 {
 543     *pbCode++ = 0xBD;
 544     *((UINT32*&)pbCode)++ = nValue;
 545     return pbCode;
 546 }
 547
 548 inline PBYTE DetourGenMovEsp(PBYTE pbCode, UINT32 nValue)
 549 {
 550     *pbCode++ = 0xBC;
 551     *((UINT32*&)pbCode)++ = nValue;
 552     return pbCode;
 553 }
 554
 555 inline PBYTE DetourGenPush(PBYTE pbCode, UINT32 nValue)
 556 {
 557     *pbCode++ = 0x68;
 558     *((UINT32*&)pbCode)++ = nValue;
 559     return pbCode;
 560 }
 561
 562 inline PBYTE DetourGenPushad(PBYTE pbCode)
 563 {
 564     *pbCode++ = 0x60;
 565     return pbCode;
 566 }
 567
 568 inline PBYTE DetourGenPopad(PBYTE pbCode)
 569 {
 570     *pbCode++ = 0x61;
 571     return pbCode;
 572 }
 573
 574 inline PBYTE DetourGenJmp(PBYTE pbCode, PBYTE pbJmpDst, PBYTE pbJmpSrc = 0)
 575 {
 576     if (pbJmpSrc == 0) {
 577         pbJmpSrc = pbCode;
 578     }
 579     *pbCode++ = 0xE9;
 580     *((INT32*&)pbCode)++ = pbJmpDst - (pbJmpSrc + 5);
 581     return pbCode;
 582 }
 583
 584 inline PBYTE DetourGenCall(PBYTE pbCode, PBYTE pbJmpDst, PBYTE pbJmpSrc = 0)
 585 {
 586     if (pbJmpSrc == 0) {
 587         pbJmpSrc = pbCode;
 588     }
 589     *pbCode++ = 0xE8;
 590     *((INT32*&)pbCode)++ = pbJmpDst - (pbJmpSrc + 5);
 591     return pbCode;
 592 }
 593
 594 inline PBYTE DetourGenBreak(PBYTE pbCode)
 595 {
 596     *pbCode++ = 0xcc;
 597     return pbCode;
 598 }
 599
 600 inline PBYTE DetourGenRet(PBYTE pbCode)
 601 {
 602     *pbCode++ = 0xc3;
 603     return pbCode;
 604 }
 605
 606 inline PBYTE DetourGenNop(PBYTE pbCode)
 607 {
 608     *pbCode++ = 0x90;
 609     return pbCode;
 610 }
 611 #endif DETOURS_INTERAL
 612 #endif // __cplusplus
 613
 614 #endif // _DETOURS_H_
 615 //
 616 ////////////////////////////////////////////////////////////////  End of File.