mirror of
https://github.com/HulkOperator/CallStackSpoofer
synced 2026-06-06 15:44:32 +00:00
HulkOperator
59 lines
1.0 KiB
C
59 lines
1.0 KiB
C
#include <Windows.h>
|
|
|
|
|
|
typedef UCHAR UBYTE;
|
|
|
|
typedef enum _UNWIND_OP_CODES {
|
|
UWOP_PUSH_NONVOL,
|
|
UWOP_ALLOC_LARGE,
|
|
UWOP_ALLOC_SMALL,
|
|
UWOP_SET_FPREG,
|
|
UWOP_SAVE_NONVOL,
|
|
UWOP_SAVE_NONVOL_FAR,
|
|
UWOP_PUSH_MACHFRAME = 10
|
|
};
|
|
|
|
typedef union _UNWIND_CODE
|
|
{
|
|
struct
|
|
{
|
|
UBYTE CodeOffset;
|
|
UBYTE UnwindOp : 4;
|
|
UBYTE OpInfo : 4;
|
|
};
|
|
USHORT FrameOffset;
|
|
} UNWIND_CODE, * PUNWIND_CODE;
|
|
|
|
typedef struct _UNWIND_INFO {
|
|
UCHAR Version : 3;
|
|
UCHAR Flags : 5;
|
|
UCHAR SizeOfPrologue;
|
|
UCHAR CountOfUnwindCodes;
|
|
UCHAR FrameRegister : 4;
|
|
UCHAR FrameRegisterOffset : 4;
|
|
UNWIND_CODE UnwindCode[1];
|
|
|
|
union {
|
|
OPTIONAL ULONG ExceptionHandler;
|
|
OPTIONAL ULONG FunctionEntry;
|
|
};
|
|
OPTIONAL ULONG ExceptionData[];
|
|
|
|
} UNWIND_INFO, * PUNWIND_INFO;
|
|
|
|
typedef struct _STACK_INFO {
|
|
|
|
UINT64 pRtlUserThreadStart;
|
|
UINT64 dwRtlUserThreadStartSize;
|
|
|
|
UINT64 pBaseThreadInitThunk;
|
|
UINT64 dwBaseThreadInitThunk;
|
|
|
|
UINT64 pGadgetAddress;
|
|
UINT64 dwGadgetSize;
|
|
|
|
UINT64 pTargetFunction;
|
|
UINT64 dwNumberOfArguments;
|
|
UINT64 pEbx;
|
|
PVOID pArgs;
|
|
}STACK_INFO, * PSTACK_INFO; |