added gcc support

main
serr 2025-01-15 18:29:50 +03:00
commit 54458e8b7c
2 changed files with 61 additions and 0 deletions

41
analysis_function.h Normal file
View File

@ -0,0 +1,41 @@
#pragma once
#include <stdio.h>
#define RET 0xC3 // ret opcode
typedef unsigned char byte;
byte* AF_address(byte* f) {
byte* real_address = NULL;
#ifdef _MSC_VER // MSVC
//printf("MSVC Compiler Detected\n");
#ifdef NDEBUG // MSVC release mode
real_address = f;
//printf("FUNCTION ADDRESS: %p\n", real_address);
#else // MSVC debug mode
byte* f_p = f;
byte* offset = (byte*)(*((int*)f_p) >> 8);
real_address = f_p + (int)offset + 5;
//printf("TABLE ADDRESS: %p\n", f_p);
//printf("OFFSET: %p\n", offset);
//printf("REAL ADDRESS: %p\n", real_address);
#endif
#elif defined(__GNUC__) // GCC
//printf("GCC Compiler Detected\n");
real_address = f;
//printf("FUNCTION ADDRESS: %p\n", real_address);
#endif
return real_address;
}
// Print bytes from address to address+size
int AF_print_bytes(byte* a, int size) {
for (int i = 0; i < size; ++i) printf("%02X ", *(a + i));
}
// Get any function size
int AF_size(byte* f) {
byte* p = f;
for (; *p != RET; ++p);
return p - f + 1;
}

20
example.c Normal file
View File

@ -0,0 +1,20 @@
// Usage example
#include <stdio.h>
#include "analysis_function.h"
// Test function
int sum(int a, int b) {
printf("a = %i, b = %i\n", a, b);
a = a * 2 + b;
b = b * 3 + 2;
return a + b;
}
int main() {
byte* addr = AF_address(sum);
// Get function size
int fsize = AF_size(addr);
// Print all function bytes
printf("FUNCTION BYTES: "); AF_print_bytes(addr, fsize); printf("\n");
return 0;
}