Textractor/GUI/misc.cpp

#include "misc.h"
#include "../vnrhook/include/const.h"
#include <QRegExp>
#include <Psapi.h>

QString GetModuleName(DWORD processId, HMODULE module)
{
	HANDLE handle = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ, FALSE, processId);
	wchar_t buffer[MAX_PATH];
	GetModuleFileNameExW(handle, module, buffer, MAX_PATH);
	CloseHandle(handle);
	return QString::fromWCharArray(wcsrchr(buffer, L'\\') + 1);
}

DWORD Hash(QString module)
{
	DWORD hash = 0;
	for (auto i : module) hash = _rotr(hash, 7) + i.unicode();
	return hash;
}

HookParam ParseHCode(QString HCode, DWORD processId)
{
	HookParam hp = {};
	HCode = HCode.toUpper();
	if (!HCode.startsWith("/H")) return {};
	HCode.remove(0, 2);
	switch (HCode.at(0).unicode())
	{
	case L'S':
		hp.type |= USING_STRING;
		break;
	case L'A':
		hp.type |= BIG_ENDIAN;
		hp.length_offset = 1;
		break;
	case L'B':
		hp.length_offset = 1;
		break;
	case L'Q':
		hp.type |= USING_STRING | USING_UNICODE;
		break;
	case L'W':
		hp.type |= USING_UNICODE;
		hp.length_offset = 1;
		break;
	default:
		return {};
	}
	HCode.remove(0, 1);
	if (HCode.at(0).unicode() == L'N')
	{
		hp.type |= NO_CONTEXT;
		HCode.remove(0, 1);
	}
	QRegExp dataOffset("^\\-?[\\dA-F]+");
	if (dataOffset.indexIn(HCode) == -1) return {};
	hp.offset = dataOffset.cap(0).toInt(nullptr, 16);
	HCode.remove(0, dataOffset.cap(0).length());
	QRegExp dataIndirect("^\\*(\\-?[\\dA-F]+)");
	if (dataIndirect.indexIn(HCode) != -1)
	{
		hp.type |= DATA_INDIRECT;
		hp.index = dataIndirect.cap(1).toInt(nullptr, 16);
		HCode.remove(0, dataIndirect.cap(0).length());
	}
	QRegExp split("^\\:(\\-?[\\dA-F]+)");
	if (split.indexIn(HCode) != -1)
	{
		hp.type |= USING_SPLIT;
		hp.split = split.cap(1).toInt(nullptr, 16);
		HCode.remove(0, split.cap(0).length());
		QRegExp splitIndirect("^\\*(\\-?[\\dA-F]+)");
		if (splitIndirect.indexIn(HCode) != -1)
		{
			hp.type |= SPLIT_INDIRECT;
			hp.split_index = splitIndirect.cap(1).toInt(nullptr, 16);
			HCode.remove(0, splitIndirect.cap(0).length());
		}
	}
	if (HCode.at(0).unicode() != L'@') return {};
	HCode.remove(0, 1);
	QRegExp address("^([\\dA-F]+):?");
	if (address.indexIn(HCode) == -1) return {};
	hp.address = address.cap(1).toInt(nullptr, 16);
	HCode.remove(address.cap(0));
	if (HCode.length())
	{
		hp.type |= MODULE_OFFSET;
		hp.module = Hash(HCode.toLower());
	}
	if (hp.offset & 0x80000000)
		hp.offset -= 4;
	if (hp.split & 0x80000000)
		hp.split -= 4;
	return hp;
}

QString GenerateHCode(HookParam hp, DWORD processId)
{
	QString code = "/H";
	if (hp.type & USING_UNICODE)
	{
		if (hp.type & USING_STRING)
			code += "Q";
		else
			code += "W";
	}
	else
	{
		if (hp.type & USING_STRING)
			code += "S";
		else if (hp.type & BIG_ENDIAN)
			code += "A";
		else
			code += "B";
	}
	if (hp.type & NO_CONTEXT)
		code += "N";
	if (hp.offset >> 31)
		code += "-" + QString::number(-(hp.offset + 4), 16);
	else
		code += QString::number(hp.offset, 16);
	if (hp.type & DATA_INDIRECT)
	{
		if (hp.index >> 31)
			code += "*-" + QString::number(-hp.index, 16);
		else
			code += "*" + QString::number(hp.index, 16);
	}
	if (hp.type & USING_SPLIT)
	{
		if (hp.split >> 31)
			code += ":-" + QString::number(-(hp.split + 4), 16);
		else
			code += ":" + QString::number(hp.split, 16);
	}
	if (hp.type & SPLIT_INDIRECT)
	{
		if (hp.split_index >> 31)
			code += "*-" + QString::number(-hp.split_index, 16);
		else
			code += "*" + QString::number(hp.split_index, 16);
	}
	code += "@";
	QString badCode = (code + QString::number(hp.address, 16)).toUpper();
	HANDLE processHandle;
	if (!(processHandle = OpenProcess(PROCESS_VM_READ | PROCESS_QUERY_INFORMATION, FALSE, processId))) return badCode;
	MEMORY_BASIC_INFORMATION info;
	if (!VirtualQueryEx(processHandle, (LPCVOID)hp.address, &info, sizeof(info))) return badCode;
	wchar_t buffer[MAX_PATH];
	if (!GetModuleFileNameExW(processHandle, (HMODULE)info.AllocationBase, buffer, MAX_PATH)) return badCode;
	code += QString::number(hp.address - (DWORD)info.AllocationBase, 16) + ":";
	code = code.toUpper();
	code += QString::fromWCharArray(wcsrchr(buffer, L'\\') + 1);
	return code;
}