organize system/client-functions

2024-04-20 10:08:00 -07:00
parent c95b158e4e
commit 741456d1da
253 changed files with 247 additions and 130 deletions
@@ -0,0 +1,56 @@
+start:
+  .include VersionDetectWithPatchFunctionsXB
+
+  xor     eax, eax
+  cmp     edx, 0
+  jne     can_patch
+  ret
+can_patch:
+
+  push    esi
+  push    edi
+  push    ebx
+  mov     edi, edx              # edi = ptr to useful kernel function ptrs
+  jmp     get_patch_data_ptr
+get_patch_data_ptr_ret:
+  pop     ebx                   # ebx = patch header
+
+apply_next_patch:
+  cmp     dword [ebx + 4], 0
+  jne     copy_code_and_apply_again
+  pop     ebx
+  pop     edi
+  pop     esi
+  mov     eax, 1
+  ret
+
+copy_code_and_apply_again:
+  push    dword [ebx]           # dest addr
+  call    [edi + 4]             # MmQueryAddressProtect
+  mov     esi, eax              # esi = prev protection flags
+
+  push    4                     # new protection flags
+  push    dword [ebx + 4]       # size
+  push    dword [ebx]           # base address
+  call    [edi]                 # MmSetAddressProtect
+
+  xor     ecx, ecx              # ecx = offset
+  mov     edx, [ebx]            # edx = dest addr
+copy_next_byte:
+  mov     al, [ebx + ecx + 8]   # copy one byte to dest
+  mov     [edx + ecx], al
+  inc     ecx                   # offset++
+  cmp     [ebx + 4], ecx        # check if all bytes have been copied
+  jne     copy_next_byte
+
+  push    esi                   # new protection flags
+  push    dword [ebx + 4]       # size
+  push    dword [ebx]           # base address
+  lea     ebx, [ebx + ecx + 8]  # advance to next block
+  call    [edi]                 # MmSetAddressProtect
+  jmp     apply_next_patch
+
+get_patch_data_ptr:
+  call    get_patch_data_ptr_ret
+
+first_patch_header: