├── .gitattributes ├── .gitignore ├── README.md └── gua3 ├── StdAfx.cpp ├── StdAfx.h ├── gua.aps ├── gua.clw ├── gua.cpp ├── gua.dsp ├── gua.dsw ├── gua.h ├── gua.ncb ├── gua.opt ├── gua.plg ├── gua.rc ├── guaDlg.cpp ├── guaDlg.h ├── res ├── gua.ico └── gua.rc2 └── resource.h /.gitattributes: -------------------------------------------------------------------------------- 1 | # Auto detect text files and perform LF normalization 2 | * text=auto 3 | 4 | # Custom for Visual Studio 5 | *.cs diff=csharp 6 | 7 | # Standard to msysgit 8 | *.doc diff=astextplain 9 | *.DOC diff=astextplain 10 | *.docx diff=astextplain 11 | *.DOCX diff=astextplain 12 | *.dot diff=astextplain 13 | *.DOT diff=astextplain 14 | *.pdf diff=astextplain 15 | *.PDF diff=astextplain 16 | *.rtf diff=astextplain 17 | *.RTF diff=astextplain 18 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # Windows image file caches 2 | Thumbs.db 3 | ehthumbs.db 4 | 5 | # Folder config file 6 | Desktop.ini 7 | 8 | # Recycle Bin used on file shares 9 | $RECYCLE.BIN/ 10 | 11 | # Windows Installer files 12 | *.cab 13 | *.msi 14 | *.msm 15 | *.msp 16 | 17 | # Windows shortcuts 18 | *.lnk 19 | 20 | # ========================= 21 | # Operating System Files 22 | # ========================= 23 | 24 | # OSX 25 | # ========================= 26 | 27 | .DS_Store 28 | .AppleDouble 29 | .LSOverride 30 | 31 | # Thumbnails 32 | ._* 33 | 34 | # Files that might appear on external disk 35 | .Spotlight-V100 36 | .Trashes 37 | 38 | # Directories potentially created on remote AFP share 39 | .AppleDB 40 | .AppleDesktop 41 | Network Trash Folder 42 | Temporary Items 43 | .apdisk 44 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # memory_codes_injection 2 | Inject codes to another process to watch and operate other process. This is usually used as anti-virus software. 3 | 4 | Inline assembly to C++ codes. And create running space for object process. And remote call object address. 5 | Through base address and offset to read data from another process. 6 | 7 | This project contains the Chinese language. Because several years ago, I made this software. 8 | As the Chinese language will not affect the codes. So I didn't change them. 9 | -------------------------------------------------------------------------------- /gua3/StdAfx.cpp: -------------------------------------------------------------------------------- 1 | // stdafx.cpp : source file that includes just the standard includes 2 | // gua.pch will be the pre-compiled header 3 | // stdafx.obj will contain the pre-compiled type information 4 | 5 | #include "stdafx.h" 6 | 7 | 8 | 9 | -------------------------------------------------------------------------------- /gua3/StdAfx.h: -------------------------------------------------------------------------------- 1 | // stdafx.h : include file for standard system include files, 2 | // or project specific include files that are used frequently, but 3 | // are changed infrequently 4 | // 5 | 6 | #if !defined(AFX_STDAFX_H__1759AA31_E03E_4351_AA96_BCC73C003C8B__INCLUDED_) 7 | #define AFX_STDAFX_H__1759AA31_E03E_4351_AA96_BCC73C003C8B__INCLUDED_ 8 | 9 | #if _MSC_VER > 1000 10 | #pragma once 11 | #endif // _MSC_VER > 1000 12 | 13 | #define VC_EXTRALEAN // Exclude rarely-used stuff from Windows headers 14 | 15 | #include // MFC core and standard components 16 | #include // MFC extensions 17 | #include // MFC Automation classes 18 | #include // MFC support for Internet Explorer 4 Common Controls 19 | #ifndef _AFX_NO_AFXCMN_SUPPORT 20 | #include // MFC support for Windows Common Controls 21 | #endif // _AFX_NO_AFXCMN_SUPPORT 22 | 23 | 24 | //{{AFX_INSERT_LOCATION}} 25 | // Microsoft Visual C++ will insert additional declarations immediately before the previous line. 26 | 27 | #endif // !defined(AFX_STDAFX_H__1759AA31_E03E_4351_AA96_BCC73C003C8B__INCLUDED_) 28 | -------------------------------------------------------------------------------- /gua3/gua.aps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hkhk366/Memory_Codes_Injection/483ca850ec606dc0d35d6fad6385505f3d7b9a5d/gua3/gua.aps -------------------------------------------------------------------------------- /gua3/gua.clw: -------------------------------------------------------------------------------- 1 | ; CLW file contains information for the MFC ClassWizard 2 | 3 | [General Info] 4 | Version=1 5 | LastClass=CGuaDlg 6 | LastTemplate=CDialog 7 | NewFileInclude1=#include "stdafx.h" 8 | NewFileInclude2=#include "gua.h" 9 | 10 | ClassCount=2 11 | Class1=CGuaApp 12 | Class2=CGuaDlg 13 | 14 | ResourceCount=3 15 | Resource2=IDR_MAINFRAME 16 | Resource3=IDD_GUA_DIALOG 17 | 18 | [CLS:CGuaApp] 19 | Type=0 20 | HeaderFile=gua.h 21 | ImplementationFile=gua.cpp 22 | Filter=N 23 | 24 | [CLS:CGuaDlg] 25 | Type=0 26 | HeaderFile=guaDlg.h 27 | ImplementationFile=guaDlg.cpp 28 | Filter=D 29 | BaseClass=CDialog 30 | VirtualFilter=dWC 31 | LastObject=IDC_EDIT2 32 | 33 | 34 | 35 | [DLG:IDD_GUA_DIALOG] 36 | Type=1 37 | Class=CGuaDlg 38 | ControlCount=10 39 | Control1=IDOK,button,1342242817 40 | Control2=IDCANCEL,button,1073807360 41 | Control3=IDC_CHECK1,button,1342242819 42 | Control4=IDC_LIST1,SysListView32,1350631437 43 | Control5=IDC_BUTTON1,button,1342242816 44 | Control6=IDC_EDIT1,edit,1350631552 45 | Control7=IDC_STATIC,static,1342308352 46 | Control8=IDC_STATIC,static,1342308352 47 | Control9=IDC_EDIT2,edit,1350631552 48 | Control10=IDC_BUTTON2,button,1073807360 49 | 50 | -------------------------------------------------------------------------------- /gua3/gua.cpp: -------------------------------------------------------------------------------- 1 | // gua.cpp : Defines the class behaviors for the application. 2 | // 3 | 4 | #include "stdafx.h" 5 | #include "gua.h" 6 | #include "guaDlg.h" 7 | 8 | #ifdef _DEBUG 9 | #define new DEBUG_NEW 10 | #undef THIS_FILE 11 | static char THIS_FILE[] = __FILE__; 12 | #endif 13 | 14 | ///////////////////////////////////////////////////////////////////////////// 15 | // CGuaApp 16 | 17 | BEGIN_MESSAGE_MAP(CGuaApp, CWinApp) 18 | //{{AFX_MSG_MAP(CGuaApp) 19 | // NOTE - the ClassWizard will add and remove mapping macros here. 20 | // DO NOT EDIT what you see in these blocks of generated code! 21 | //}}AFX_MSG 22 | ON_COMMAND(ID_HELP, CWinApp::OnHelp) 23 | END_MESSAGE_MAP() 24 | 25 | ///////////////////////////////////////////////////////////////////////////// 26 | // CGuaApp construction 27 | 28 | CGuaApp::CGuaApp() 29 | { 30 | // TODO: add construction code here, 31 | // Place all significant initialization in InitInstance 32 | } 33 | 34 | ///////////////////////////////////////////////////////////////////////////// 35 | // The one and only CGuaApp object 36 | 37 | CGuaApp theApp; 38 | 39 | ///////////////////////////////////////////////////////////////////////////// 40 | // CGuaApp initialization 41 | 42 | BOOL CGuaApp::InitInstance() 43 | { 44 | AfxEnableControlContainer(); 45 | 46 | // Standard initialization 47 | // If you are not using these features and wish to reduce the size 48 | // of your final executable, you should remove from the following 49 | // the specific initialization routines you do not need. 50 | 51 | #ifdef _AFXDLL 52 | Enable3dControls(); // Call this when using MFC in a shared DLL 53 | #else 54 | Enable3dControlsStatic(); // Call this when linking to MFC statically 55 | #endif 56 | 57 | CGuaDlg dlg; 58 | m_pMainWnd = &dlg; 59 | int nResponse = dlg.DoModal(); 60 | if (nResponse == IDOK) 61 | { 62 | // TODO: Place code here to handle when the dialog is 63 | // dismissed with OK 64 | } 65 | else if (nResponse == IDCANCEL) 66 | { 67 | // TODO: Place code here to handle when the dialog is 68 | // dismissed with Cancel 69 | } 70 | 71 | // Since the dialog has been closed, return FALSE so that we exit the 72 | // application, rather than start the application's message pump. 73 | return FALSE; 74 | } 75 | -------------------------------------------------------------------------------- /gua3/gua.dsp: -------------------------------------------------------------------------------- 1 | # Microsoft Developer Studio Project File - Name="gua" - Package Owner=<4> 2 | # Microsoft Developer Studio Generated Build File, Format Version 6.00 3 | # ** DO NOT EDIT ** 4 | 5 | # TARGTYPE "Win32 (x86) Application" 0x0101 6 | 7 | CFG=gua - Win32 Debug 8 | !MESSAGE This is not a valid makefile. To build this project using NMAKE, 9 | !MESSAGE use the Export Makefile command and run 10 | !MESSAGE 11 | !MESSAGE NMAKE /f "gua.mak". 12 | !MESSAGE 13 | !MESSAGE You can specify a configuration when running NMAKE 14 | !MESSAGE by defining the macro CFG on the command line. For example: 15 | !MESSAGE 16 | !MESSAGE NMAKE /f "gua.mak" CFG="gua - Win32 Debug" 17 | !MESSAGE 18 | !MESSAGE Possible choices for configuration are: 19 | !MESSAGE 20 | !MESSAGE "gua - Win32 Release" (based on "Win32 (x86) Application") 21 | !MESSAGE "gua - Win32 Debug" (based on "Win32 (x86) Application") 22 | !MESSAGE 23 | 24 | # Begin Project 25 | # PROP AllowPerConfigDependencies 0 26 | # PROP Scc_ProjName "" 27 | # PROP Scc_LocalPath "" 28 | CPP=cl.exe 29 | MTL=midl.exe 30 | RSC=rc.exe 31 | 32 | !IF "$(CFG)" == "gua - Win32 Release" 33 | 34 | # PROP BASE Use_MFC 6 35 | # PROP BASE Use_Debug_Libraries 0 36 | # PROP BASE Output_Dir "Release" 37 | # PROP BASE Intermediate_Dir "Release" 38 | # PROP BASE Target_Dir "" 39 | # PROP Use_MFC 6 40 | # PROP Use_Debug_Libraries 0 41 | # PROP Output_Dir "Release" 42 | # PROP Intermediate_Dir "Release" 43 | # PROP Target_Dir "" 44 | # ADD BASE CPP /nologo /MD /W3 /GX /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_AFXDLL" /Yu"stdafx.h" /FD /c 45 | # ADD CPP /nologo /MD /W3 /GX /O2 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_AFXDLL" /D "_MBCS" /Yu"stdafx.h" /FD /c 46 | # ADD BASE MTL /nologo /D "NDEBUG" /mktyplib203 /win32 47 | # ADD MTL /nologo /D "NDEBUG" /mktyplib203 /win32 48 | # ADD BASE RSC /l 0x804 /d "NDEBUG" /d "_AFXDLL" 49 | # ADD RSC /l 0x804 /d "NDEBUG" /d "_AFXDLL" 50 | BSC32=bscmake.exe 51 | # ADD BASE BSC32 /nologo 52 | # ADD BSC32 /nologo 53 | LINK32=link.exe 54 | # ADD BASE LINK32 /nologo /subsystem:windows /machine:I386 55 | # ADD LINK32 /nologo /subsystem:windows /machine:I386 56 | 57 | !ELSEIF "$(CFG)" == "gua - Win32 Debug" 58 | 59 | # PROP BASE Use_MFC 6 60 | # PROP BASE Use_Debug_Libraries 1 61 | # PROP BASE Output_Dir "Debug" 62 | # PROP BASE Intermediate_Dir "Debug" 63 | # PROP BASE Target_Dir "" 64 | # PROP Use_MFC 6 65 | # PROP Use_Debug_Libraries 1 66 | # PROP Output_Dir "Debug" 67 | # PROP Intermediate_Dir "Debug" 68 | # PROP Target_Dir "" 69 | # ADD BASE CPP /nologo /MDd /W3 /Gm /GX /ZI /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "_AFXDLL" /Yu"stdafx.h" /FD /GZ /c 70 | # ADD CPP /nologo /MDd /W3 /Gm /GX /ZI /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /D "_AFXDLL" /D "_MBCS" /FR /Yu"stdafx.h" /FD /GZ /c 71 | # ADD BASE MTL /nologo /D "_DEBUG" /mktyplib203 /win32 72 | # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32 73 | # ADD BASE RSC /l 0x804 /d "_DEBUG" /d "_AFXDLL" 74 | # ADD RSC /l 0x804 /d "_DEBUG" /d "_AFXDLL" 75 | BSC32=bscmake.exe 76 | # ADD BASE BSC32 /nologo 77 | # ADD BSC32 /nologo 78 | LINK32=link.exe 79 | # ADD BASE LINK32 /nologo /subsystem:windows /debug /machine:I386 /pdbtype:sept 80 | # ADD LINK32 /nologo /subsystem:windows /debug /machine:I386 /pdbtype:sept 81 | 82 | !ENDIF 83 | 84 | # Begin Target 85 | 86 | # Name "gua - Win32 Release" 87 | # Name "gua - Win32 Debug" 88 | # Begin Group "Source Files" 89 | 90 | # PROP Default_Filter "cpp;c;cxx;rc;def;r;odl;idl;hpj;bat" 91 | # Begin Source File 92 | 93 | SOURCE=.\gua.cpp 94 | # End Source File 95 | # Begin Source File 96 | 97 | SOURCE=.\gua.rc 98 | # End Source File 99 | # Begin Source File 100 | 101 | SOURCE=.\guaDlg.cpp 102 | # End Source File 103 | # Begin Source File 104 | 105 | SOURCE=.\StdAfx.cpp 106 | # ADD CPP /Yc"stdafx.h" 107 | # End Source File 108 | # End Group 109 | # Begin Group "Header Files" 110 | 111 | # PROP Default_Filter "h;hpp;hxx;hm;inl" 112 | # Begin Source File 113 | 114 | SOURCE=.\gua.h 115 | # End Source File 116 | # Begin Source File 117 | 118 | SOURCE=.\guaDlg.h 119 | # End Source File 120 | # Begin Source File 121 | 122 | SOURCE=.\Resource.h 123 | # End Source File 124 | # Begin Source File 125 | 126 | SOURCE=.\StdAfx.h 127 | # End Source File 128 | # End Group 129 | # Begin Group "Resource Files" 130 | 131 | # PROP Default_Filter "ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe" 132 | # Begin Source File 133 | 134 | SOURCE=.\res\gua.ico 135 | # End Source File 136 | # Begin Source File 137 | 138 | SOURCE=.\res\gua.rc2 139 | # End Source File 140 | # End Group 141 | # Begin Source File 142 | 143 | SOURCE=.\ReadMe.txt 144 | # End Source File 145 | # End Target 146 | # End Project 147 | -------------------------------------------------------------------------------- /gua3/gua.dsw: -------------------------------------------------------------------------------- 1 | Microsoft Developer Studio Workspace File, Format Version 6.00 2 | # WARNING: DO NOT EDIT OR DELETE THIS WORKSPACE FILE! 3 | 4 | ############################################################################### 5 | 6 | Project: "gua"=".\gua.dsp" - Package Owner=<4> 7 | 8 | Package=<5> 9 | {{{ 10 | }}} 11 | 12 | Package=<4> 13 | {{{ 14 | }}} 15 | 16 | ############################################################################### 17 | 18 | Global: 19 | 20 | Package=<5> 21 | {{{ 22 | }}} 23 | 24 | Package=<3> 25 | {{{ 26 | }}} 27 | 28 | ############################################################################### 29 | 30 | -------------------------------------------------------------------------------- /gua3/gua.h: -------------------------------------------------------------------------------- 1 | // gua.h : main header file for the GUA application 2 | // 3 | 4 | #if !defined(AFX_GUA_H__0A3C3A74_E97D_4C9D_8194_0724C687F1C4__INCLUDED_) 5 | #define AFX_GUA_H__0A3C3A74_E97D_4C9D_8194_0724C687F1C4__INCLUDED_ 6 | 7 | #if _MSC_VER > 1000 8 | #pragma once 9 | #endif // _MSC_VER > 1000 10 | 11 | #ifndef __AFXWIN_H__ 12 | #error include 'stdafx.h' before including this file for PCH 13 | #endif 14 | 15 | #include "resource.h" // main symbols 16 | 17 | ///////////////////////////////////////////////////////////////////////////// 18 | // CGuaApp: 19 | // See gua.cpp for the implementation of this class 20 | // 21 | 22 | class CGuaApp : public CWinApp 23 | { 24 | public: 25 | CGuaApp(); 26 | 27 | // Overrides 28 | // ClassWizard generated virtual function overrides 29 | //{{AFX_VIRTUAL(CGuaApp) 30 | public: 31 | virtual BOOL InitInstance(); 32 | //}}AFX_VIRTUAL 33 | 34 | // Implementation 35 | 36 | //{{AFX_MSG(CGuaApp) 37 | // NOTE - the ClassWizard will add and remove member functions here. 38 | // DO NOT EDIT what you see in these blocks of generated code ! 39 | //}}AFX_MSG 40 | DECLARE_MESSAGE_MAP() 41 | }; 42 | 43 | 44 | ///////////////////////////////////////////////////////////////////////////// 45 | 46 | //{{AFX_INSERT_LOCATION}} 47 | // Microsoft Visual C++ will insert additional declarations immediately before the previous line. 48 | 49 | #endif // !defined(AFX_GUA_H__0A3C3A74_E97D_4C9D_8194_0724C687F1C4__INCLUDED_) 50 | -------------------------------------------------------------------------------- /gua3/gua.ncb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hkhk366/Memory_Codes_Injection/483ca850ec606dc0d35d6fad6385505f3d7b9a5d/gua3/gua.ncb -------------------------------------------------------------------------------- /gua3/gua.opt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hkhk366/Memory_Codes_Injection/483ca850ec606dc0d35d6fad6385505f3d7b9a5d/gua3/gua.opt -------------------------------------------------------------------------------- /gua3/gua.plg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hkhk366/Memory_Codes_Injection/483ca850ec606dc0d35d6fad6385505f3d7b9a5d/gua3/gua.plg -------------------------------------------------------------------------------- /gua3/gua.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hkhk366/Memory_Codes_Injection/483ca850ec606dc0d35d6fad6385505f3d7b9a5d/gua3/gua.rc -------------------------------------------------------------------------------- /gua3/guaDlg.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hkhk366/Memory_Codes_Injection/483ca850ec606dc0d35d6fad6385505f3d7b9a5d/gua3/guaDlg.cpp -------------------------------------------------------------------------------- /gua3/guaDlg.h: -------------------------------------------------------------------------------- 1 | // guaDlg.h : header file 2 | // 3 | 4 | #if !defined(AFX_GUADLG_H__6B5B7422_0C8D_47CD_B46D_7B13EDB6141B__INCLUDED_) 5 | #define AFX_GUADLG_H__6B5B7422_0C8D_47CD_B46D_7B13EDB6141B__INCLUDED_ 6 | 7 | #if _MSC_VER > 1000 8 | #pragma once 9 | #endif // _MSC_VER > 1000 10 | 11 | ///////////////////////////////////////////////////////////////////////////// 12 | // CGuaDlg dialog 13 | 14 | class CGuaDlg : public CDialog 15 | { 16 | // Construction 17 | public: 18 | CGuaDlg(CWnd* pParent = NULL); // standard constructor 19 | 20 | // Dialog Data 21 | //{{AFX_DATA(CGuaDlg) 22 | enum { IDD = IDD_GUA_DIALOG }; 23 | CListCtrl m_syslist; 24 | CString m_wupinming; 25 | int m_jiange; 26 | //}}AFX_DATA 27 | 28 | // ClassWizard generated virtual function overrides 29 | //{{AFX_VIRTUAL(CGuaDlg) 30 | protected: 31 | virtual void DoDataExchange(CDataExchange* pDX); // DDX/DDV support 32 | //}}AFX_VIRTUAL 33 | 34 | // Implementation 35 | protected: 36 | HICON m_hIcon; 37 | 38 | // Generated message map functions 39 | //{{AFX_MSG(CGuaDlg) 40 | virtual BOOL OnInitDialog(); 41 | afx_msg void OnPaint(); 42 | afx_msg HCURSOR OnQueryDragIcon(); 43 | afx_msg void OnButton1(); 44 | afx_msg void OnCheck1(); 45 | afx_msg void OnTimer(UINT nIDEvent); 46 | afx_msg void OnButton2(); 47 | //}}AFX_MSG 48 | DECLARE_MESSAGE_MAP() 49 | }; 50 | 51 | //{{AFX_INSERT_LOCATION}} 52 | // Microsoft Visual C++ will insert additional declarations immediately before the previous line. 53 | 54 | #endif // !defined(AFX_GUADLG_H__6B5B7422_0C8D_47CD_B46D_7B13EDB6141B__INCLUDED_) 55 | -------------------------------------------------------------------------------- /gua3/res/gua.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hkhk366/Memory_Codes_Injection/483ca850ec606dc0d35d6fad6385505f3d7b9a5d/gua3/res/gua.ico -------------------------------------------------------------------------------- /gua3/res/gua.rc2: -------------------------------------------------------------------------------- 1 | // 2 | // GUA.RC2 - resources Microsoft Visual C++ does not edit directly 3 | // 4 | 5 | #ifdef APSTUDIO_INVOKED 6 | #error this file is not editable by Microsoft Visual C++ 7 | #endif //APSTUDIO_INVOKED 8 | 9 | 10 | ///////////////////////////////////////////////////////////////////////////// 11 | // Add manually edited resources here... 12 | 13 | ///////////////////////////////////////////////////////////////////////////// 14 | -------------------------------------------------------------------------------- /gua3/resource.h: -------------------------------------------------------------------------------- 1 | //{{NO_DEPENDENCIES}} 2 | // Microsoft Developer Studio generated include file. 3 | // Used by gua.rc 4 | // 5 | #define IDD_GUA_DIALOG 102 6 | #define IDR_MAINFRAME 128 7 | #define IDC_CHECK1 1000 8 | #define IDC_LIST1 1001 9 | #define IDC_BUTTON1 1002 10 | #define IDC_EDIT1 1003 11 | #define IDC_EDIT2 1004 12 | #define IDC_BUTTON2 1005 13 | 14 | // Next default values for new objects 15 | // 16 | #ifdef APSTUDIO_INVOKED 17 | #ifndef APSTUDIO_READONLY_SYMBOLS 18 | #define _APS_NEXT_RESOURCE_VALUE 129 19 | #define _APS_NEXT_COMMAND_VALUE 32771 20 | #define _APS_NEXT_CONTROL_VALUE 1006 21 | #define _APS_NEXT_SYMED_VALUE 101 22 | #endif 23 | #endif 24 | --------------------------------------------------------------------------------