[Release][C#]WhiteMagic - Injected .NET Helper Library

[Apoc]

Well, since Shynd released his BlackMagic library for out of process work, I figured I'd release my own little library, for in process work.

Aptly named: WhiteMagic. (My creativity is awesome isn't it?)

Anyhow... this library is aimed towards users who inject their .NET applications into processes. It provides ways to hook/detour functions, create memory patches, find patterns (via my FindPatternSharp stuff), as well as read/write memory (basic datatypes, structs, etc).

It's released under the GPLv3 license (so you silly commercial people can't just go stealing code all willy nilly like).

The API is fairly well rounded, with only 1 class instantiation required (or omitted if you choose), and you can do pretty much everything from there.

Anyhow, I'm not releasing an example with this, because... if you don't know how to use it properly... you shouldn't be using it at all.

HOWEVER, I will answer questions based on API troubles and the like. Other than that, it's up to you to figure out.

The code is commented, and will throw more than enough exceptions to make sure you code is kept in line of requirements. (Eg; proper attributes, etc)

You can grab it here: http://dl.getdropbox.com/u/2068143/WhiteMagic.rar

Edit: Since I got a few PMs about how to actually use the Detour API, here's a quick example.
Please note, the addresses used, are from WoW. Using the proper addresses to your DXDevice should produce the same results.

using System;
using System.Runtime.InteropServices;

using WhiteMagic;

namespace ConsoleApplication1
{
    internal class Program
    {
        #region Delegates

        [UnmanagedFunctionPointer(CallingConvention.WinApi)]
        public delegate int EndSceneDelegate(IntPtr instance);

        #endregion

        private static readonly EndSceneDelegate EndSceneHandler = EndScene;

        private static readonly Magic m = new Magic();

        private static int EndScene(IntPtr instance)
        {
            // Pulse();

            return (int)m.Detours["EndScene"].CallOriginal(instance);
        }

        private static void Main(string[] args)
        {
            IntPtr endSceneAddr = m.GetObjectVtableFunction(m.Read<IntPtr>(0x0123E908, 0x397C), 42);
            m.Detours.CreateAndApply(m.RegisterDelegate<EndSceneDelegate>(endSceneAddr), EndSceneHandler, "EndScene");
        }
    }
}

Changes:

9/20/2009 (v0.0.1.1)
- Added x64 support. Simply build with X64 as a define.
- Added support to turn off most exceptions. Simply build with NOEXCEPTIONS as a define.
- Cleaned up some code.
- Added more documentation, etc.
- Fixed a bug in the Detour class that caused it to crash. (Forgot to set the _win32 var)
- Minor other fixes

Credits:

Major credit to Shynd, who's name I pretty much stole (from his BlackMagic lib, aimed towards out of proc editors)
kynox; being an awesome ausfag
Cypher: being a portability nazi kiwi (yes, this lib is mainly for x86, no x64 support is implied)
jjaa; a good bit of his code is used in this library, however, I've changed/rewritten a good chunk of it.
Shynd; the BlackMagic library that I used as a basis of.. well... even writing this one...
Everyone at GD; just plain awesome people.
MMOwned; 95% retarded dimwits, but some of you are awesome.

[~OddBall~]

O gawd, every commercial bot is no longer safe O.o

[Apoc]

An example since MaiN had some issues with the detour API.

This is how you can easily hook EndScene using the library:

using System;
using System.Runtime.InteropServices;

using WhiteMagic;

namespace ConsoleApplication1
{
    internal class Program
    {
        #region Delegates

        [UnmanagedFunctionPointer(CallingConvention.WinApi)]
        public delegate int EndSceneDelegate(IntPtr instance);

        #endregion

        private static readonly EndSceneDelegate EndSceneHandler = EndScene;

        private static readonly Magic m = new Magic();

        private static int EndScene(IntPtr instance)
        {
            // Pulse();

            return (int)m.Detours["EndScene"].CallOriginal(instance);
        }

        private static void Main(string[] args)
        {
            IntPtr endSceneAddr = m.GetObjectVtableFunction(m.Read<IntPtr>(0x0123E908, 0x397C), 42);
            m.Detours.CreateAndApply(m.RegisterDelegate<EndSceneDelegate>(endSceneAddr), EndSceneHandler, "EndScene");
        }
    }
}

[Nesox]

very kewl apoc

[The-Eradicator]

Very awesome.

[Viano]

Originally Posted by Apoc

...
It's released under the GPLv3 license (so you silly commercial people can't just go stealing code all willy nilly like).
...

Thanks for this

But is the license even valid? Since there is no author or application name in there?

<program>  Copyright (C) <year>  <name of author>

[Apoc]

Originally Posted by Viano

Thanks for this

But is the license even valid? Since there is no author or application name in there?

<program>  Copyright (C) <year>  <name of author>

The full license doesn't require those filled out. (Everything after the TOS can be omitted from the full license, I left it in for obvious reasons)

Each piece of source code has the proper license/copyright header.

Nice try though!

Also; the bit you're referring to is for terminal applications. Not a library.

[CimSlunt]

Very nice!!

i bet im one of that 5% of MMOwned thats awesome

Btw, Anyone know how to start an exe from buttonclick in vb??

Sorry to hijack Apoc

[FenixTX2]

i bet im one of that 5% of MMOwned thats awesome

Btw, Anyone know how to start an exe from buttonclick in vb??

You are not awesome.
Edit: Sorry meant to add an answer. Have you tried 'shellexecute(<filename>)'?
or is that not exactly the functionality you were looking for?

[Apoc]

Originally Posted by FenixTX2

You are not awesome.

Troll: Successful.

[CimSlunt]

Originally Posted by FenixTX2

You are not awesome.

Ok well thanks for clearing that up for me xD

One day i will be awesome!!!

[Robske]

Amazing lib.

I have a design question though, seeing as every instance of the Magic class will be identical (as in, it will interact with the same process, namely itself) then why not make the entire class static? Is there a specific drawback to static classes?

"Robske, you are a moron and should gtfo and read some programming books" is a valid answer.



Also, 360 awesome people on mmowned ? (5% of 7219)

[Apoc]

Originally Posted by Robske

Amazing lib.

I have a design question though, seeing as every instance of the Magic class will be identical (as in, it will interact with the same process, namely itself) then why not make the entire class static? Is there a specific drawback to static classes?

"Robske, you are a moron and should gtfo and read some programming books" is a valid answer.



Also, 360 awesome people on mmowned ? (5% of 7219)

What happens when you inject two different applications in the same AppDomain, that use this library? You end up with 'bad' shit in memory. (Each app conflicting with eachother, etc)

You could always just use the Magic.Instance property if you so choose.

There's no specific reason to use a class instance over static classes; other than avoidance of possible bugs.

[MaiN]

Freaking awesome library!

[oliman]

WOW, I was hoping to figure out how to hook endScene today and now I have this kick ass library to play with.

plus it's C#, holy crap!

Thanks Apoc