SignatureToDetour: Converts IDA Pro signatures to C++ Detours

[sh3dow]

this tool is helpful when you try to hook functions that aren't in the Win32 API.
Example:

Given a signature like the following from IDA Pro:

PHP Code:

char __cdecl sub_1193D40(int a1, unsigned int a2, signed int *a3, _BYTE **a4, const char *a5) 


SignatureToDetour will output ("InternalFunction" being the user supplied desired name):

PHP Code:

#define INTERNALFUNCTION_ADDRESS 0x1193D40
char(__cdecl* originalInternalFunction)(int, unsigned int, signed int *, BYTE **, const char *);
char hkInternalFunction(int a1,  unsigned int a2,  signed int *a3,  BYTE **a4,  const char *a5)
{
    return originalInternalFunction(a1, a2, a3, a4, a5);
}

originalInternalFunction = (char(__cdecl*)(int, unsigned int, signed int *, BYTE **, const char *))DetourFunction((PBYTE)INTERNALFUNCTION_ADDRESS, (PBYTE)hkInternalFunction); 


source

PHP Code:

https://github.com/ChairGraveyard/SignatureToDetour 


[΢Цһ��]

Good tool. Maybe it's better to Write IDA plugin.

[Shub-Nigurrath]

very nice, always have to do it manually!