CodeFunctions.cpp

#include "CodeFunctions.h"
#include <algorithm>

#define RPS_ARGUMENT_LIMIT 20

#define JMP_OR_CALL_REQUIRED_BYTE_COUNT 5

// forward declaration
void LuaLandingFromCpp();

// forward declaration
void detourLandingFunction();

/**
 * The currently supported calling conventions:
 * 
 */
enum CallingConvention {
	/**
	 * Caller is responsible for stack cleanup.
	 */
	CALLER = 0,
	/**
	 * Callee is responsible for stack cleanup, `this` parameter given in ECX.
	 */
	THISCALL = 1,
	/**
	 * Callee is responsible for stack cleanup, no `this` parameter.
	 */
	STDCALL = 2,
};

bool DoCreateCallHook(DWORD from_address, DWORD to_address, int hookSize, DWORD& newFunctionLocation) {
	constexpr INT8 NOP = (INT8)0x90;
	constexpr INT8 JMP = (INT8)0xE9;
	constexpr INT8 CALL = (INT8)0xE8;

	int size = hookSize;
	if (size < JMP_OR_CALL_REQUIRED_BYTE_COUNT) return FALSE;

	BYTE* fun_o_ptr = (BYTE*)from_address;
	BYTE* fun_h_ptr = (BYTE*)to_address;

	// create gateway: size + 5 
	BYTE* gateway = (BYTE*)VirtualAlloc(0, size + JMP_OR_CALL_REQUIRED_BYTE_COUNT, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);
	memcpy_s(gateway, size, fun_o_ptr, size);
	uintptr_t gatewayRelAddress = fun_o_ptr - gateway - JMP_OR_CALL_REQUIRED_BYTE_COUNT;

	*(gateway + size) = JMP;
	*(uintptr_t*)((uintptr_t)gateway + size + 1) = gatewayRelAddress;

	// detour

	DWORD oldProtect;
	VirtualProtect(fun_o_ptr, size, PAGE_EXECUTE_READWRITE, &oldProtect);

	memset(fun_o_ptr, NOP, size); // needs to be done, otherwise this confuses the CE disassmbler

	uintptr_t relAddress = fun_h_ptr - fun_o_ptr - JMP_OR_CALL_REQUIRED_BYTE_COUNT;

	*fun_o_ptr = CALL;
	*(uintptr_t*)(fun_o_ptr + 1) = relAddress;

	VirtualProtect(fun_o_ptr, size, oldProtect, &oldProtect);

	// point original function to gateway
	newFunctionLocation = (DWORD)& gateway[0];

	return true;
}



class LuaHook {
public:
	DWORD address;
	int hookSize;
	int callingConvention;
	int argumentsCount;
	DWORD newOriginalFunctionLocation;
	std::string luaHookFunctionName;
	std::string luaOriginalFunctionName;
	DWORD thisValue;
	int luaTableRef;
	int luaHookFunctionRef;

	LuaHook(DWORD addr, int hookSize, int callingConv, int argCount, std::string luaHook, std::string luaOriginal) {
		this->address = addr;
		this->hookSize = hookSize;
		this->callingConvention = callingConv;
		this->argumentsCount = argCount - (int)(callingConv == CallingConvention::THISCALL); // To keep it clear for the lua users...
		this->luaHookFunctionName = luaHook;
		this->luaOriginalFunctionName = luaOriginal;
		this->luaTableRef = -1;
		this->luaHookFunctionRef = -1;
	}

	bool CreateCallHook() {
		return DoCreateCallHook(this->address, (DWORD)LuaLandingFromCpp, this->hookSize, this->newOriginalFunctionLocation);
	}

	void setHookFunctionRef(lua_State* L) {
		assert(this->luaTableRef != -1);

		// Put the table at the top of the stack.
		lua_rawgeti(L, LUA_REGISTRYINDEX, this->luaTableRef);

		// Put the key on top of the stack.
		lua_pushstring(L, this->luaHookFunctionName.c_str());

		// Puts the value on top of the stack
		lua_gettable(L, -2);

		if (lua_isfunction(L, -1)) {
			this->luaHookFunctionRef = luaL_ref(L, LUA_REGISTRYINDEX); //or -1?
		}
		else {
			throw "cannot set hookfunctionref because there is no function with the name: " + this->luaHookFunctionName;
		}
	}

	void registerOriginalFunctionInLua(lua_State* L) {

		if (this->luaTableRef == -1) {
			lua_pushglobaltable(L);
		}
		else {
			// Put the table on the top of the stack.
			lua_rawgeti(L, LUA_REGISTRYINDEX, this->luaTableRef);
		}

		// Put the key on the top of the stack
		lua_pushstring(L, this->luaOriginalFunctionName.c_str());

		lua_pushinteger(L, this->newOriginalFunctionLocation);
		lua_pushinteger(L, this->argumentsCount);
		lua_pushinteger(L, this->callingConvention);
		lua_pushcclosure(L, &luaCallMachineCode, 3);

		lua_settable(L, -3);
		lua_pop(L, 1); // Pop the table

	}
};

std::map<DWORD, std::shared_ptr<LuaHook>> hookMapping;

/**
	These variables are here to keep the raw assembly code easy and avoid this-parameter code.
*/
char luaHookedFunctionName[100];
DWORD newOriginalFunctionLocation;
DWORD functionLocation;
int luaHookedFunctionArgCount;
int luaErrorLevel;
std::string luaErrorMsg;
int luaCallingConvention;
DWORD currentECXValue;
int luaHookedFunctionTableReference;
int luaHookedFunctionReference;


// exposeCode(address, argumentCount, callingConvention)
int luaExposeCode(lua_State* L) {

	if (lua_gettop(L) != 3) {
		return luaL_error(L, "invalid number of arguments");
	}

	DWORD address = lua_tointeger(L, 1);
	if (address == 0) {
		return luaL_error(L, "argument 1 must be a valid address");
	}
	
	int argumentCount = lua_tointeger(L, 2);
	
	int callingConvention;
	if (lua_type(L, 3) == LUA_TSTRING) {
		std::string ccString = lua_tostring(L, 3);
		std::transform(ccString.begin(), ccString.end(), ccString.begin(), [](unsigned char c) { return std::tolower(c); });
		if (ccString == "cdecl") {
			callingConvention = CALLER;
		}
		else if (ccString == "thiscall") {
			callingConvention = THISCALL;
		}
		else if (ccString == "stdcall") {
			callingConvention = STDCALL;
		}
		else {
			return luaL_error(L, "argument 3 must be a valid calling convention");
		}
	}
	else if (lua_type(L, 3) == LUA_TNUMBER) {
		callingConvention = lua_tointeger(L, 3);
	}
	else {
		return luaL_error(L, "argument 3 must be a valid calling convention");
	}
	
	if (callingConvention < CallingConvention::CALLER || callingConvention > CallingConvention::STDCALL) {
		return luaL_error(L, "argument 3 must be a valid calling convention");
	}

	if (argumentCount > RPS_ARGUMENT_LIMIT) {
		return luaL_error(L, "too many arguments specified, max is %d but %d were specified", RPS_ARGUMENT_LIMIT, argumentCount);
	}

	int adjustedArgCount = argumentCount - (int)(callingConvention == CallingConvention::THISCALL);
	lua_pushinteger(L, address); // set upvalue address
	lua_pushinteger(L, adjustedArgCount); // set upvalue argument count, exclude `this`
	lua_pushinteger(L, callingConvention); // set upvalue calling convention
	lua_pushcclosure(L, &luaCallMachineCode, 3); // creates a closure with the upvalues

	// return the function
	return 1;
}


// hookCode(luaHook, address, argumentCount, callingConvention, hookSize)
int luaHookCode(lua_State* L) {
	if (lua_gettop(L) != 5) {
		return luaL_error(L, "expecting 5 arguments");
	}

	if (!lua_isfunction(L, 1)) {
		return luaL_error(L, "argument 1 must be a function");
	}

	DWORD address = lua_tointeger(L, 2);
	if (address == 0) {
		return luaL_error(L, "argument 2 must be a valid number");
	}

	int argumentCount = lua_tointeger(L, 3);

	int callingConvention;
	if (lua_type(L, 4) == LUA_TSTRING) {
		std::string ccString = lua_tostring(L, 4);
		std::transform(ccString.begin(), ccString.end(), ccString.begin(), [](unsigned char c) { return std::tolower(c); });
		if (ccString == "cdecl") {
			callingConvention = CALLER;
		}
		else if (ccString == "thiscall") {
			callingConvention = THISCALL;
		}
		else if (ccString == "stdcall") {
			callingConvention = STDCALL;
		}
		else {
			return luaL_error(L, "argument 4 must be a valid calling convention");
		}
	}
	else if (lua_type(L, 4) == LUA_TNUMBER) {
		callingConvention = lua_tointeger(L, 4);
	}
	else {
		return luaL_error(L, "argument 4 must be a valid calling convention");
	}

	int hookSize = lua_tointeger(L, 5);
	if (hookSize < 5) {
		return luaL_error(L, "argument 5, the hook size, must be a least 5");
	}

	if (argumentCount > RPS_ARGUMENT_LIMIT) {
		return luaL_error(L, "too many arguments specified, max is %d but %d were specified" , RPS_ARGUMENT_LIMIT, argumentCount);
	}

	std::pair<std::map<DWORD, std::shared_ptr<LuaHook>>::const_iterator, bool> hi = hookMapping.insert(std::pair<DWORD, std::shared_ptr<LuaHook>>(address, std::make_shared<LuaHook>(address, hookSize, callingConvention, argumentCount, "", "")));

	if (!hi.second) {
		return luaL_error(L, "a hook already exists for function at: 0x%X", address);
	}

	// Store a reference to the hook function that is to be called later.
	lua_pushvalue(L, 1);
	hookMapping[address]->luaHookFunctionRef = luaL_ref(L, LUA_REGISTRYINDEX);

	hookMapping[address]->CreateCallHook();

	lua_pushinteger(L, hookMapping[address]->newOriginalFunctionLocation);
	lua_pushinteger(L, hookMapping[address]->argumentsCount);
	lua_pushinteger(L, hookMapping[address]->callingConvention);
	lua_pushcclosure(L, &luaCallMachineCode, 3);

	// return the function
	return 1;
}

DWORD __stdcall executeLuaHook(unsigned long* args) {

	DWORD fl = functionLocation;

	if (luaHookedFunctionReference == -1) {
		std::cout << "[LUA_API]: invalid lua reference to hook function: " << luaHookedFunctionName << " at: " << std::hex << fl << std::endl;
		return 0;
	}

	lua_rawgeti(LC, LUA_REGISTRYINDEX, luaHookedFunctionReference);

	if (lua_isfunction(LC, -1)) {
		int totalArgCount = luaHookedFunctionArgCount;
		if (luaCallingConvention == CallingConvention::THISCALL) {
			lua_pushnumber(LC, currentECXValue);
			totalArgCount += 1;
		}
		for (int i = 0; i < luaHookedFunctionArgCount; i++) {
			lua_pushnumber(LC, args[i]);
		}
		if (lua_pcall(LC, totalArgCount, 1, 0) == LUA_OK) {
			luaErrorLevel = 0;
			luaErrorMsg = "";
			int ret = (DWORD)lua_tonumber(LC, -1);
			lua_pop(LC, 1); // pop off the return value;
			return ret;
		}
		else {
			luaErrorLevel = 1;
			luaErrorMsg = lua_tostring(LC, -1);
			lua_pop(LC, 1); // pop off the error message;
		}
	}
	else {
		lua_pop(LC, 1); // we need this pop, because the getglobal does a push that would otherwise be popped by pcall.
		luaErrorLevel = 2;
		luaErrorMsg = std::string(luaHookedFunctionName) + " is not a function";
	}

	std::cout << "[RPS]: error in lua callback function from " << std::hex << fl << " :" << std::string(luaErrorMsg) << std::endl;
	return 0;
}

void __stdcall SetLuaHookedFunctionParameters(DWORD origin, DWORD liveECXValue) {
	std::map<DWORD, std::shared_ptr<LuaHook>>::iterator it;

	it = hookMapping.find(origin);
	if (it != hookMapping.end()) {
		std::shared_ptr<LuaHook> value = it->second;
		memset(luaHookedFunctionName, 0, 100);
		memcpy(luaHookedFunctionName, value->luaHookFunctionName.c_str(), value->luaHookFunctionName.size());
		luaHookedFunctionArgCount = value->argumentsCount;
		luaCallingConvention = value->callingConvention;
		newOriginalFunctionLocation = value->newOriginalFunctionLocation;
		functionLocation = value->address;
		currentECXValue = liveECXValue;
		luaHookedFunctionTableReference = value->luaTableRef;
		luaHookedFunctionReference = value->luaHookFunctionRef;
	}
	else {

	}

}

DWORD fakeStack[RPS_ARGUMENT_LIMIT + 1];

// The user has called the luaOriginalFunctionName
int luaCallMachineCode(lua_State* L) {
	DWORD address = lua_tointeger(L, lua_upvalueindex(1));
	int argumentCount = lua_tointeger(L, lua_upvalueindex(2));
	int callingConvention = lua_tointeger(L, lua_upvalueindex(3));

	int actualArgCount = lua_gettop(L);

	if (callingConvention == CallingConvention::THISCALL) {
		int totalArgCount = argumentCount + 1; // ecx is passed as the first parameter
		if (actualArgCount != totalArgCount) {
			return luaL_error(L, "[RPS]: error when invoking function 0x%X: expected %d arguments, but received %d", functionLocation, totalArgCount, actualArgCount);
		}

		for (int i = 0; i < argumentCount; i++) {
			if (lua_type(L, i + 1 + 1) != LUA_TNUMBER) {
				return luaL_error(L, ("[RPS]: calling function " + std::to_string(functionLocation) + " argument #" + std::to_string(i + 1 + 1) + " is not an integer (or pointer);").c_str());
			}
			fakeStack[i] = lua_tointeger(L, i + 1 + 1); // i+1+1 (1 to offset 0-base and 1 because this-parameter is ignored
		}

		if (lua_type(L, 1) != LUA_TNUMBER) {
			return luaL_error(L, "[RPS]: calling function 0x%X ecx value is not an integer (or pointer)", functionLocation);
		}

		currentECXValue = lua_tointeger(L, 1); // this parameter
	}
	else {
		if (lua_gettop(L) != argumentCount) { // + 0
			return luaL_error(L, "[RPS]: error when invoking function 0x%X: expected %d arguments, but received %d", functionLocation, argumentCount, actualArgCount);
		}

		for (int i = 0; i < argumentCount; i++) {
			if (lua_type(L, i + 1) != LUA_TNUMBER) {
				return luaL_error(L, "[RPS]: calling function 0x%X argument #%d is not an integer (or pointer)", functionLocation, i + 1);
			}
			fakeStack[i] = lua_tointeger(L, i + 1); // i + 1 to offset the 0-base
		}


	}

	__asm {
		mov ecx, argumentCount;
	loopbegin:
		cmp ecx, 0;
		jle done;
		dec ecx;
		mov eax, fakeStack[ecx * 4];
		push eax;
		jmp loopbegin;
	done:
		mov ecx, callingConvention;
		cmp ecx, 0;
		je caller;
		jmp callee;
	caller:
		mov ecx, argumentCount;
		mov eax, address;
		cmp ecx, 0;
		je add0x00;
		cmp ecx, 1;
		je add0x04;
		cmp ecx, 2;
		je add0x08;
		cmp ecx, 3;
		je add0x0C;
		cmp ecx, 4;
		je add0x10;
		cmp ecx, 5;
		je add0x14;
		cmp ecx, 6;
		je add0x18;
		cmp ecx, 7;
		je add0x1C;
		cmp ecx, 8;
		je add0x20;
		cmp ecx, 9;
		je add0x24;
		cmp ecx, 10;
		je add0x28;
		cmp ecx, 11;
		je add0x2C;
		cmp ecx, 12;
		je add0x30;
		cmp ecx, 13;
		je add0x34;
		cmp ecx, 14;
		je add0x38;
		cmp ecx, 15;
		je add0x3C;
		cmp ecx, 16;
		je add0x40;
		cmp ecx, 17;
		je add0x44;
		cmp ecx, 18;
		je add0x48;
		cmp ecx, 19;
		je add0x4C;
		cmp ecx, 20;
		je add0x50;
	add0x00:
		call eax;
		add esp, 0x00;
		jmp eor;
	add0x04:
		call eax;
		add esp, 0x04;
		jmp eor;
	add0x08:
		call eax;
		add esp, 0x08;
		jmp eor;
	add0x0C:
		call eax;
		add esp, 0x0C;
		jmp eor;
	add0x10:
		call eax;
		add esp, 0x10;
		jmp eor;
	add0x14:
		call eax;
		add esp, 0x14;
		jmp eor;
	add0x18:
		call eax;
		add esp, 0x18;
		jmp eor;
	add0x1c:
		call eax;
		add esp, 0x1c;
		jmp eor;
	add0x20:
		call eax;
		add esp, 0x20;
		jmp eor;
	add0x24:
		call eax;
		add esp, 0x24;
		jmp eor;
	add0x28:
		call eax;
		add esp, 0x28;
		jmp eor;
	add0x2C:
		call eax;
		add esp, 0x2C;
		jmp eor;
	add0x30:
		call eax;
		add esp, 0x30;
		jmp eor;
	add0x34:
		call eax;
		add esp, 0x34;
		jmp eor;
	add0x38:
		call eax;
		add esp, 0x38;
		jmp eor;
	add0x3C:
		call eax;
		add esp, 0x3C;
		jmp eor;
	add0x40:
		call eax;
		add esp, 0x40;
		jmp eor;
	add0x44:
		call eax;
		add esp, 0x44;
		jmp eor;
	add0x48:
		call eax;
		add esp, 0x48;
		jmp eor;
	add0x4C:
		call eax;
		add esp, 0x4C;
		jmp eor;
	add0x50:
		call eax;
		add esp, 0x50;
		jmp eor;
	callee:
		mov eax, address;
		mov ecx, currentECXValue;
		call eax;
	eor:
	}

	DWORD result;
	__asm {
		mov result, eax;
	}
	lua_pushinteger(L, result);

	return 1;
}

void __declspec(naked) LuaLandingFromCpp() {
	__asm {
		// pop the previous EIP+5 into eax
		pop eax;
		push ecx;
		sub eax, 5;
		push eax;
		// set up the right global variables for the current hook
		call SetLuaHookedFunctionParameters;

		//At this point, we should have the original call stack
		mov eax, esp;
		// compensate for the return address we have on the stack...
		add eax, 4;
		push eax;

		mov eax, [luaCallingConvention];
		cmp eax, 0;
		je retNone;
		cmp eax, 1; // this cmp is bullshit for now, because calling convention 0 is the only with caller cleanup.
		mov eax, [luaHookedFunctionArgCount];
		cmp eax, 0;
		je ret0x0;
		cmp eax, 1;
		je ret0x4;
		cmp eax, 2;
		je ret0x8;
		cmp eax, 3;
		je ret0xC;
		cmp eax, 4;
		je ret0x10;
		cmp eax, 5;
		je ret0x14;
		cmp eax, 6;
		je ret0x18;
		cmp eax, 7;
		je ret0x1C;
		cmp eax, 8;
		je ret0x20;
		cmp eax, 9;
		je ret0x24;
		cmp eax, 10;
		je ret0x28;
		cmp eax, 11;
		je ret0x2C;
		cmp eax, 12;
		je ret0x30;
		cmp eax, 13;
		je ret0x34;
		cmp eax, 14;
		je ret0x38;
		cmp eax, 15;
		je ret0x3C;
		cmp eax, 16;
		je ret0x40;
		cmp eax, 17;
		je ret0x44;
		cmp eax, 18;
		je ret0x48;
		cmp eax, 19;
		je ret0x4C;
		cmp eax, 20;
		je ret0x50;
		jmp retNone;

	ret0x0:
		call executeLuaHook;
		ret 0x0;

	ret0x4:
		call executeLuaHook;
		ret 0x4;

	ret0x8:
		call executeLuaHook;
		ret 0x8;

	ret0xC:
		call executeLuaHook;
		ret 0xC;

	ret0x10:
		call executeLuaHook;
		ret 0x10;

	ret0x14:
		call executeLuaHook;
		ret 0x14;

	ret0x18:
		call executeLuaHook;
		ret 0x18;

	ret0x1C:
		call executeLuaHook;
		ret 0x1C;

	ret0x20:
		call executeLuaHook;
		ret 0x20;

	ret0x24:
		call executeLuaHook;
		ret 0x24;

	ret0x28:
		call executeLuaHook;
		ret 0x28;

	ret0x2C:
		call executeLuaHook;
		ret 0x2C;

	ret0x30:
		call executeLuaHook;
		ret 0x30;

	ret0x34:
		call executeLuaHook;
		ret 0x34;

	ret0x38:
		call executeLuaHook;
		ret 0x38;

	ret0x3C:
		call executeLuaHook;
		ret 0x3C;

	ret0x40:
		call executeLuaHook;
		ret 0x40;

	ret0x44:
		call executeLuaHook;
		ret 0x44;

	ret0x48:
		call executeLuaHook;
		ret 0x48;

	ret0x4C:
		call executeLuaHook;
		ret 0x4C;

	ret0x50:
		call executeLuaHook;
		ret 0x50;
		

	retNone:
		call executeLuaHook;
		ret;
	}
}

class LuaDetour {
public:
	DWORD address;
	std::string luaDetourFunctionName;
	DWORD detourReturnLocation;
	int luaTableRef;
	int luaFunctionRef;

	LuaDetour(DWORD address, DWORD detourReturnLocation) {
		this->address = address;
		this->detourReturnLocation = detourReturnLocation;
		this->luaTableRef = -1;
		this->luaFunctionRef = -1;
	}
};

std::map<DWORD, std::shared_ptr<LuaDetour>> detourTargetMap;
DWORD currentDetourSource;
DWORD currentDetourReturn;
std::string currentDetourTarget;


// detourCode(hookedFunction, address, hookSize)
int luaDetourCode(lua_State* L) {
	if (lua_gettop(L) < 3) {
		return luaL_error(L, "expecting exactly 3 arguments");
	}

	if (!lua_isfunction(L, 1)) {
		return luaL_error(L, "argument 1 must be a function");
	}

	DWORD address = lua_tointeger(L, 2);
	if (address == 0) {
		return luaL_error(L, "address = 0 is not a valid argument");
	}
	int hookSize = lua_tointeger(L, 3);

	DWORD ret;
	DoCreateCallHook(address, (DWORD)detourLandingFunction, hookSize, ret);

	lua_pushvalue(L, 1);
	int luaFunctionRef = luaL_ref(L, LUA_REGISTRYINDEX);

	std::pair<std::map<DWORD, std::shared_ptr<LuaDetour>>::const_iterator, bool> hi = detourTargetMap.insert(std::pair<DWORD, std::shared_ptr<LuaDetour>>(address, std::make_shared<LuaDetour>(address, ret)));
	if (!hi.second) {
		return luaL_error(L, "detour already exists at this address: 0x%X", address);
	}
	
	detourTargetMap[address]->luaFunctionRef = luaFunctionRef;

	return 0;
}

void __stdcall GetDetourLuaTargetAndCallTheLuaFunction(DWORD address, DWORD* registers) {
	bool exists = detourTargetMap.count(address) == 1;
	if (!exists) {
		assert(exists);
	}
	std::shared_ptr<LuaDetour> entry = detourTargetMap[address];
	currentDetourReturn = entry->detourReturnLocation;
	int retLoc = entry->detourReturnLocation;

	const std::vector<std::string> order = { "EDI", "ESI", "EBP", "ESP", "EBX", "EDX", "ECX", "EAX" };

	if (entry->luaFunctionRef == -1) {
		std::cout << "[RPS]: " << "invalid detour lua function";
		return;
	}

	int before = lua_gettop(LC);

	lua_rawgeti(LC, LUA_REGISTRYINDEX, entry->luaFunctionRef);

	if (lua_isfunction(LC, -1)) {
		lua_createtable(LC, 0, 8);

		for (int i = 0; i < order.size(); i++) {
			lua_pushstring(LC, order[i].c_str());
			if (order[i] == "ESP") {
				lua_pushinteger(LC, registers[i]+8);
			}
			else {
				lua_pushinteger(LC, registers[i]);
			}
			lua_settable(LC, -3); /* 3rd element from the stack top */
		}

		// We call the function and pass 1 argument and expect 1 argument in return.
		if (lua_pcall(LC, 1, 1, 0) == LUA_OK) {
			luaErrorLevel = 0;
			luaErrorMsg = "";
			if (lua_istable(LC, -1)) {
				/* table is in the stack at index 't' */
				lua_pushnil(LC); /* first key */
				while (lua_next(LC, -2) != 0) {
					/* uses 'key' (at index -2) and 'value' (at index -1) */
					if (!lua_isstring(LC, -2)) {
						luaErrorLevel = 6;
						luaErrorMsg = "The return value table must have string keys";
						std::cout << "[RPS]: " << std::string(luaErrorMsg) << std::endl;
						currentDetourReturn = retLoc;

						lua_settop(LC, before);
						return;
					}
					if (!lua_isinteger(LC, -1)) {
						luaErrorLevel = 5;
						luaErrorMsg = "The return value table must have integer values";
						std::cout << "[RPS]: " << std::string(luaErrorMsg) << std::endl;
						currentDetourReturn = retLoc;

						lua_settop(LC, before);
						return;
					}

					std::string key = lua_tostring(LC, -2);
					DWORD value = lua_tointeger(LC, -1);

					std::vector<std::string>::const_iterator it = find(order.begin(), order.end(), key);
					if (it == order.end()) {
						luaErrorLevel = 4;
						luaErrorMsg = "The key does not exist: " + key;
						std::cout << "[RPS]: " << std::string(luaErrorMsg) << std::endl;
						currentDetourReturn = retLoc;

						lua_settop(LC, before);
						return;
					}

					int index = it - order.begin();
					if (key == "ESP") {
						// Either do +8 because we gave it to lua with a -8 offset, or ignore the value and make it a readonly thing.
						// registers[index] = value-8;
					}
					else {
						registers[index] = value;
					}
					

					/* removes 'value'; keeps 'key' for next iteration */
					lua_pop(LC, 1);
				}
				lua_pop(LC, 1); // pop off the return value;
				currentDetourReturn = retLoc;

				lua_settop(LC, before);
				return;
			}
			else {
				luaErrorLevel = 3;
				luaErrorMsg = "Detour did not return a table";
			}
			lua_pop(LC, 1); // pop off the return value;
			currentDetourReturn = retLoc;

			lua_settop(LC, before);
			return;
		}
		else {
			luaErrorLevel = 1;
			luaErrorMsg = lua_tostring(LC, -1);
			lua_pop(LC, 1); // pop off the error message;
		}
	}
	else {
		lua_pop(LC, 1); // I think we need this pop, because the getglobal does a push that would otherwise be popped by pcall.
		luaErrorLevel = 2;
		luaErrorMsg = std::string(entry->luaDetourFunctionName.c_str()) + " is not a function";
	}

	std::cout << "[RPS]: " << std::string(luaErrorMsg) << std::endl;

	lua_settop(LC, before);
	currentDetourReturn = retLoc;
}

void __declspec(naked) detourLandingFunction() {
	__asm {

		pushfd; // pushes 1 element
		pushad; // pushes 8 elements

		mov ecx, esp; // store a pointer to the register values on the stack.

		mov eax, [esp + (9 * 0x04)]; // the 9th element will be the return address from the detour.
		sub eax, JMP_OR_CALL_REQUIRED_BYTE_COUNT; // subtract 5 because a jump is 5 long to get the origin address.
		push ecx; // push the register array;
		push eax; // set this as an argument to the function.

		// set up the right global variables for the current detour
		call GetDetourLuaTargetAndCallTheLuaFunction; // this function also should set currentDetourReturn;

		popad;
		popfd;

		add esp, 4; // remove the address that was pushed by the call detour

		jmp currentDetourReturn;
	}
}



int convertTableToByteStream(lua_State* L, std::stringstream* s) {

	for (int i = 1; ; i++) {
		lua_geti(L, -1, i);

		if (lua_isnil(L, -1)) {
			lua_pop(L, 1);
			break;
		}

		if (!lua_isinteger(L, -1)) {
			lua_pop(L, 1);
			return -1;
		}

		unsigned int value = lua_tointeger(L, -1);

		if (value <= 0xff && value >= 0x00) {
			s->write(reinterpret_cast<const char*>(&value), 1);
		}
		else {
			s->write(reinterpret_cast<const char*>(&value), 4);
		}

		/* removes 'value' */
		lua_pop(L, 1);
	}

	return 0;
}

int luaWriteCode(lua_State* L) {
	if (lua_gettop(L) != 2) {
		return luaL_error(L, "expected exactly 2 arguments");
	}
	DWORD address = lua_tointeger(L, 1);
	if (address == 0) {
		return luaL_error(L, "address = 0 is an invalid argument");
	}
	if (!lua_istable(L, 2)) {
		return luaL_error(L, "the second argument should be a table");
	}

	// write an intermediate state here that extracts the table and converts bytes to bytes
// and that converts integers to 4 bytes in big endian order.
// 
	// Makes use the of the table at -1 (2)
	std::stringstream bytes;
	int returnCode = convertTableToByteStream(L, &bytes);

	if (returnCode == -1) {
		return luaL_error(L, "The return value table must have integer values");
	}
	else if (returnCode == -2) {
		return luaL_error(L, "The values must all be positive");
	}

	bytes.seekg(0, bytes.end);
	int size = bytes.tellg();
	bytes.seekg(0, bytes.beg);

	DWORD oldProtect;
	VirtualProtect((LPVOID)address, size, PAGE_EXECUTE_READWRITE, &oldProtect);

	memcpy((void*)address, bytes.str().data(), size);

	VirtualProtect((LPVOID)address, size, oldProtect, &oldProtect);

	return 0;
}



int luaAllocateRWE(lua_State* L) {
	if (lua_gettop(L) != 1) {
		return luaL_error(L, "Wrong number of arguments passed");
	}

	int size = lua_tonumber(L, 1);
	if (size == 0) {
		return luaL_error(L, "size = 0 is an invalid argument");
	}

	SYSTEM_INFO system_info;
	GetSystemInfo(&system_info);
	auto const page_size = system_info.dwPageSize;

	LPVOID adr = HeapAlloc(ProcessMemory::getInstance().codeHeap, 0, size);
	if (adr == 0) {
		return luaL_error(L, "failed to allocate executable memory");
	}

	lua_pushinteger(L, (DWORD_PTR)adr);

	return 1;
}

int luaDeallocateRWE(lua_State* L) {
	if (lua_gettop(L) != 1) {
		return luaL_error(L, "Expected one argument");
	}

	long addr = luaL_checkinteger(L, 1);
	if (addr == 0) {
		return luaL_error(L, "Address is 0");
	}

	LPVOID memory = (LPVOID) addr;
	HeapFree(ProcessMemory::getInstance().codeHeap, 0, memory);

	return 0;
}

bool validateAOBQuery(const char* query) {
	size_t len = strlen(query);
	for (int i = 0; i < len; i++) {
		const char c = query[i];
		if (c < '0') {
			if (c != ' ') {
				return false;
			}
		}
		else if (c > '9') {
			if (c < 'A') {
				if (c != '?') {
					return false;
				}
			}
			else if (c > 'F') {
				if (c < 'a') {
					return false;
				}
				else if (c > 'f') {
					return false;
				}
			}
			else {

			}
		}
		else {
			
		}
	}
	return true;
}

int luaScanForAOB(lua_State* L) {
	DWORD min = 0;
	DWORD max = 0x7FFFFFFF;

	if (lua_isstring(L, 1) != 1) {
		return luaL_error(L, "first argument needs to be a string");
	}

	if (std::string(lua_tostring(L, 1)).length() < 2) {
		return luaL_error(L, "first argument is too short, minimum length is 2");
	}

	if (lua_gettop(L) == 1) {

	}
	else if (lua_gettop(L) == 2) {
		if (lua_isnumber(L, 2) != 1) {
			return luaL_error(L, "second argument needs to be a number");
		}
		min = lua_tointeger(L, 2);
	}
	else if (lua_gettop(L) == 3) {
		if (lua_isnumber(L, 2) != 1) {
			return luaL_error(L, "second argument needs to be a number");
		}
		min = lua_tointeger(L, 2);
		if (lua_isnumber(L, 3) != 1) {
			return luaL_error(L, "third argument needs to be a number");
		}
		max = lua_tointeger(L, 3);
	}
	else {
		return luaL_error(L, "Expected exactly one, two, or three arguments");
	}

	std::string query = lua_tostring(L, 1);

	if (!validateAOBQuery(query.c_str())) {
		return luaL_error(L, "Invalid format, only spaces, 0-9, A-F, and ? are allowed");
	}

	DWORD address = AOB::FindInRange(query, min, max);

	if (address == 0) {
		lua_pushnil(L);
	}
	else {
		lua_pushinteger(L, address);
	}

	return 1;
}