@memoryprocess/bindings 0.0.0-stage → 0.0.1

package/native/hde/table64.h

@@ -0,0 +1,74 @@
+/*
+ * Hacker Disassembler Engine 64 C
+ * Copyright (c) 2008-2009, Vyacheslav Patkov.
+ * All rights reserved.
+ *
+ */
+
+#define C_NONE    0x00
+#define C_MODRM   0x01
+#define C_IMM8    0x02
+#define C_IMM16   0x04
+#define C_IMM_P66 0x10
+#define C_REL8    0x20
+#define C_REL32   0x40
+#define C_GROUP   0x80
+#define C_ERROR   0xff
+
+#define PRE_ANY  0x00
+#define PRE_NONE 0x01
+#define PRE_F2   0x02
+#define PRE_F3   0x04
+#define PRE_66   0x08
+#define PRE_67   0x10
+#define PRE_LOCK 0x20
+#define PRE_SEG  0x40
+#define PRE_ALL  0xff
+
+#define DELTA_OPCODES      0x4a
+#define DELTA_FPU_REG      0xfd
+#define DELTA_FPU_MODRM    0x104
+#define DELTA_PREFIXES     0x13c
+#define DELTA_OP_LOCK_OK   0x1ae
+#define DELTA_OP2_LOCK_OK  0x1c6
+#define DELTA_OP_ONLY_MEM  0x1d8
+#define DELTA_OP2_ONLY_MEM 0x1e7
+
+unsigned char hde64_table[] = {
+  0xa5,0xaa,0xa5,0xaa,0xa5,0xaa,0xa5,0xaa,0xa5,0xb8,0xa5,0xb8,0xa5,0xb8,0xa5,
+  0xb8,0xc0,0xc0,0xc0,0xc0,0xc0,0xc0,0xc0,0xc0,0xac,0xc0,0xcc,0xc0,0xa1,0xa1,
+  0xa1,0xa1,0xb1,0xa5,0xa5,0xa6,0xc0,0xc0,0xd7,0xda,0xe0,0xc0,0xe4,0xc0,0xea,
+  0xea,0xe0,0xe0,0x98,0xc8,0xee,0xf1,0xa5,0xd3,0xa5,0xa5,0xa1,0xea,0x9e,0xc0,
+  0xc0,0xc2,0xc0,0xe6,0x03,0x7e,0x11,0x7e,0x01,0x7f,0x01,0x3f,0x01,0x01,0xab,
+  0x8b,0x90,0x64,0x5b,0x5b,0x5b,0x5b,0x5b,0x92,0x5b,0x5b,0x76,0x90,0x92,0x92,
+  0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x6a,0x73,0x90,
+  0x5b,0x52,0x52,0x52,0x52,0x5b,0x5b,0x5b,0x5b,0x77,0x7c,0x77,0x85,0x5b,0x5b,
+  0x70,0x5b,0x7a,0xaf,0x76,0x76,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,0x5b,
+  0x5b,0x5b,0x86,0x01,0x01,0x01,0x00,0x03,0xd5,0x03,0xd5,0x03,0xcc,0x01,0xa0,
+  0x03,0xf0,0x03,0x03,0x04,0x00,0x50,0x50,0x50,0x50,0xff,0x20,0x20,0x20,0x20,
+  0x01,0x01,0x01,0x01,0xc4,0x02,0x10,0xff,0xff,0xff,0x01,0x00,0x03,0x11,0xff,
+  0x03,0xc4,0xc6,0xc8,0x02,0x10,0x00,0xff,0xcc,0x01,0x01,0x01,0x00,0x00,0x00,
+  0x00,0x01,0x01,0x03,0x01,0xff,0xff,0xc0,0xc2,0x10,0x11,0x02,0x03,0x01,0x01,
+  0x01,0xff,0xff,0xff,0x00,0x00,0x00,0xff,0x00,0x00,0xff,0xff,0xff,0xff,0x10,
+  0x10,0x10,0x10,0x02,0x10,0x00,0x00,0xc6,0xc8,0x02,0x02,0x02,0x02,0x06,0x00,
+  0x04,0x00,0x02,0xff,0x00,0xc0,0xc2,0x01,0x01,0x03,0x03,0x03,0xca,0x40,0x00,
+  0x0a,0x00,0x04,0x00,0x00,0x00,0x00,0x7f,0x00,0x33,0x01,0x00,0x00,0x00,0x00,
+  0x00,0x00,0xff,0xbf,0xff,0xff,0x00,0x00,0x00,0x00,0x07,0x00,0x00,0xff,0x00,
+  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff,0xff,
+  0x00,0x00,0x00,0xbf,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x7f,0x00,0x00,
+  0xff,0x40,0x40,0x40,0x40,0x41,0x49,0x40,0x40,0x40,0x40,0x4c,0x42,0x40,0x40,
+  0x40,0x40,0x40,0x40,0x40,0x40,0x4f,0x44,0x53,0x40,0x40,0x40,0x44,0x57,0x43,
+  0x5c,0x40,0x60,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,
+  0x40,0x40,0x64,0x64,0x6e,0x6b,0x40,0x40,0x6a,0x46,0x40,0x40,0x44,0x46,0x40,
+  0x40,0x5b,0x44,0x40,0x40,0x00,0x00,0x00,0x00,0x06,0x06,0x06,0x06,0x01,0x06,
+  0x06,0x02,0x06,0x06,0x00,0x06,0x00,0x0a,0x0a,0x00,0x00,0x00,0x02,0x07,0x07,
+  0x06,0x02,0x0d,0x06,0x06,0x06,0x0e,0x05,0x05,0x02,0x02,0x00,0x00,0x00,0x00,
+  0x04,0x04,0x05,0x06,0x06,0x06,0x00,0x00,0x00,0x0e,0x00,0x00,0x08,0x00,0x10,
+  0x00,0x18,0x00,0x20,0x00,0x28,0x00,0x30,0x00,0x80,0x01,0x82,0x01,0x86,0x00,
+  0xf6,0xcf,0xfe,0x3f,0xab,0x00,0xb0,0x00,0xb1,0x00,0xb3,0x00,0xba,0xf8,0xbb,
+  0x00,0xc0,0x00,0xc1,0x00,0xc7,0xbf,0x62,0xff,0x00,0x8d,0xff,0x00,0xc4,0xff,
+  0x00,0xc5,0xff,0x00,0xff,0xff,0xeb,0x01,0xff,0xff,0x12,0x08,0x00,0x13,0x09,
+  0x00,0x16,0x08,0x00,0x17,0x09,0x00,0x2b,0x09,0x00,0xae,0xff,0xff,0xb2,0xff,
+  0x00,0xb4,0xff,0x00,0xb5,0xff,0x00,0xc3,0x01,0x00,0xc7,0xff,0xbf,0xe7,0x09,
+  0x00,0xf0,0x02,0x00
+};

package/native/memory.cc

@@ -0,0 +1,21 @@
+#include "memory.h"
+#include <system_error>
+
+namespace mp {
+
+std::vector<std::uint8_t> ReadBytes(HANDLE proc, std::uintptr_t address, std::size_t size) {
+  std::vector<std::uint8_t> buf(size);
+  SIZE_T read = 0;
+  if (!ReadProcessMemory(proc, reinterpret_cast<LPCVOID>(address), buf.data(), size, &read)) {
+    throw std::system_error(static_cast<int>(GetLastError()), std::system_category(), "ReadProcessMemory");
+  }
+  buf.resize(read);
+  return buf;
+}
+
+bool WriteBytes(HANDLE proc, std::uintptr_t address, const std::uint8_t* data, std::size_t size) {
+  SIZE_T written = 0;
+  return WriteProcessMemory(proc, reinterpret_cast<LPVOID>(address), data, size, &written) && written == size;
+}
+
+} // namespace mp

package/native/memory.h

@@ -0,0 +1,31 @@
+#pragma once
+#include <napi.h>
+#include <windows.h>
+#include <cstdint>
+#include <vector>
+
+namespace mp {
+
+// Read `size` bytes from `address` in `proc`. Returns bytes actually read.
+// Throws LastError on hard failure (0 bytes && error != PARTIAL).
+std::vector<std::uint8_t> ReadBytes(HANDLE proc, std::uintptr_t address, std::size_t size);
+bool WriteBytes(HANDLE proc, std::uintptr_t address, const std::uint8_t* data, std::size_t size);
+
+// Typed helpers
+template <typename T>
+T ReadValue(HANDLE proc, std::uintptr_t address) {
+  T out{};
+  SIZE_T read = 0;
+  if (!ReadProcessMemory(proc, reinterpret_cast<LPCVOID>(address), &out, sizeof(T), &read) || read != sizeof(T)) {
+    throw std::system_error(static_cast<int>(GetLastError()), std::system_category(), "ReadProcessMemory");
+  }
+  return out;
+}
+
+template <typename T>
+bool WriteValue(HANDLE proc, std::uintptr_t address, const T& value) {
+  SIZE_T written = 0;
+  return WriteProcessMemory(proc, reinterpret_cast<LPVOID>(address), &value, sizeof(T), &written) && written == sizeof(T);
+}
+
+} // namespace mp

package/native/memoryprocess.cc

@@ -0,0 +1,43 @@
+#include <napi.h>
+#include "module.h"
+
+static Napi::Object Init(Napi::Env env, Napi::Object exports) {
+  exports.Set("openProcess", Napi::Function::New(env, mp::OpenProcessSync));
+  exports.Set("closeHandle", Napi::Function::New(env, mp::CloseHandleSync));
+  exports.Set("listProcesses", Napi::Function::New(env, mp::ListProcessesSync));
+  exports.Set("getModules", Napi::Function::New(env, mp::GetModulesSync));
+  exports.Set("getRegions", Napi::Function::New(env, mp::GetRegionsSync));
+  exports.Set("readValue", Napi::Function::New(env, mp::ReadValueSync));
+  exports.Set("writeValue", Napi::Function::New(env, mp::WriteValueSync));
+  exports.Set("readBuffer", Napi::Function::New(env, mp::ReadBufferSync));
+  exports.Set("writeBuffer", Napi::Function::New(env, mp::WriteBufferSync));
+  exports.Set("scan", Napi::Function::New(env, mp::ScanAsync));
+  exports.Set("allocMemory", Napi::Function::New(env, mp::AllocMemorySync));
+  exports.Set("freeMemory", Napi::Function::New(env, mp::FreeMemorySync));
+  exports.Set("protectMemory", Napi::Function::New(env, mp::ProtectMemorySync));
+  exports.Set("isWow64", Napi::Function::New(env, mp::IsWow64Sync));
+  exports.Set("listThreads", Napi::Function::New(env, mp::ListThreadsSync));
+  exports.Set("suspendThread", Napi::Function::New(env, mp::SuspendThreadSync));
+  exports.Set("resumeThread", Napi::Function::New(env, mp::ResumeThreadSync));
+  exports.Set("readSafe", Napi::Function::New(env, mp::ReadSafeSync));
+  exports.Set("flushInstructions", Napi::Function::New(env, mp::FlushInstructionsSync));
+  exports.Set("injectDll", Napi::Function::New(env, mp::InjectDllSync));
+  exports.Set("ejectDll", Napi::Function::New(env, mp::EjectDllSync));
+  exports.Set("queryAddress", Napi::Function::New(env, mp::QueryAddressSync));
+  exports.Set("getThreadContext", Napi::Function::New(env, mp::GetThreadContextSync));
+  exports.Set("setThreadContext", Napi::Function::New(env, mp::SetThreadContextSync));
+  exports.Set("callRemote", Napi::Function::New(env, mp::CallRemoteSync));
+  exports.Set("disasmInstructions", Napi::Function::New(env, mp::DisasmInstructionsSync));
+  exports.Set("scanValue", Napi::Function::New(env, mp::ScanValueAsync));
+  exports.Set("suspendProcess", Napi::Function::New(env, mp::SuspendProcessSync));
+  exports.Set("resumeProcess", Napi::Function::New(env, mp::ResumeProcessSync));
+  exports.Set("enableDebugPrivilege", Napi::Function::New(env, mp::EnableDebugPrivilegeSync));
+  exports.Set("waitForExit", Napi::Function::New(env, mp::WaitForExitAsync));
+  exports.Set("findWhatWrites", Napi::Function::New(env, mp::FindWhatWritesAsync));
+  exports.Set("hookSteal", Napi::Function::New(env, mp::HookStealSync));
+  exports.Set("writeProtectedMemory", Napi::Function::New(env, mp::WriteProtectedMemorySync));
+  exports.Set("currentThreadId", Napi::Function::New(env, mp::CurrentThreadIdSync));
+  return exports;
+}
+
+NODE_API_MODULE(memoryprocess, Init)