#pragma once // hookman.h // 8/23/2013 jichi // Branch: ITH/HookManager.h, rev 133 #include "host/avl_p.h" #include "host/textthread.h" #include "winmutex/winmutex.h" #include namespace pugi { class xml_node; } class Profile; enum { MAX_REGISTER = 0xf }; enum { MAX_PREV_REPEAT_LENGTH = 0x20 }; struct ProcessRecord { DWORD pid_register; DWORD hookman_register; DWORD module_register; //DWORD engine_register; // jichi 10/19/2014: removed HANDLE process_handle; HANDLE hookman_mutex; HANDLE hookman_section; LPVOID hookman_map; HANDLE hostPipe; }; class ThreadTable : public MyVector { public: virtual void SetThread(DWORD number, TextThread *ptr); virtual TextThread *FindThread(DWORD number); }; struct IHFSERVICE TCmp { char operator()(const ThreadParameter *t1, const ThreadParameter *t2); }; struct IHFSERVICE TCpy { void operator()(ThreadParameter *t1, const ThreadParameter *t2); }; struct IHFSERVICE TLen { int operator()(const ThreadParameter *t); }; typedef DWORD (*ProcessEventCallback)(DWORD pid); struct ThreadParameterHasher { size_t operator()(const ThreadParameter& tp) const { return std::hash()(tp.pid << 6) + std::hash()(tp.hook) + std::hash()(tp.retn) + std::hash()(tp.spl); } }; class IHFSERVICE HookManager : public AVLTree { public: HookManager(); ~HookManager(); // jichi 12/26/2013: remove virtual modifiers TextThread *FindSingle(DWORD number); ProcessRecord *GetProcessRecord(DWORD pid); void RemoveSingleThread(DWORD number); //void LockHookman(); //void UnlockHookman(); void ResetRepeatStatus(); void ClearCurrent(); void SelectCurrent(DWORD num); void SetCurrent(TextThread *it); void AddConsoleOutput(LPCWSTR text); // jichi 10/27/2013: Add const; add space. void DispatchText(DWORD pid, const BYTE *text, DWORD hook, DWORD retn, DWORD split, int len, bool space); void RemoveProcessContext(DWORD pid); // private void RemoveSingleHook(DWORD pid, DWORD addr); void RegisterThread(TextThread*, DWORD); // private void RegisterProcess(DWORD pid, HANDLE hostPipe); void UnRegisterProcess(DWORD pid); //void SetName(DWORD); HANDLE GetHostPipeByPID(DWORD pid); ConsoleCallback RegisterConsoleCallback(ConsoleCallback cf) { return (ConsoleCallback)_InterlockedExchange((long*)&console,(long)cf); } ConsoleWCallback RegisterConsoleWCallback(ConsoleWCallback cf) { return (ConsoleWCallback)_InterlockedExchange((long*)&wconsole,(long)cf); } ThreadEventCallback RegisterThreadCreateCallback(ThreadEventCallback cf) { return (ThreadEventCallback)_InterlockedExchange((long*)&create,(long)cf); } ThreadEventCallback RegisterThreadRemoveCallback(ThreadEventCallback cf) { return (ThreadEventCallback)_InterlockedExchange((long*)&remove,(long)cf); } ThreadEventCallback RegisterThreadResetCallback(ThreadEventCallback cf) { return (ThreadEventCallback)_InterlockedExchange((long*)&reset,(long)cf); } ThreadEventCallback RegisterAddRemoveLinkCallback(ThreadEventCallback cf) { return (ThreadEventCallback)_InterlockedExchange((long*)&addRemoveLink, (long)cf); } ProcessEventCallback RegisterProcessAttachCallback(ProcessEventCallback cf) { return (ProcessEventCallback)_InterlockedExchange((long*)&attach,(long)cf); } ProcessEventCallback RegisterProcessDetachCallback(ProcessEventCallback cf) { return (ProcessEventCallback)_InterlockedExchange((long*)&detach,(long)cf); } void OnThreadCreate(pugi::xml_node profile_node, TextThread* thread); void GetProfile(DWORD pid, pugi::xml_node profile_node); private: std::unordered_map threadTable; std::unordered_map processRecordsByIds; typedef win_mutex mutex_type; mutex_type hmcs; TextThread *current; ConsoleCallback console; // jichi 12/25/2013: add console output callback ConsoleWCallback wconsole; ThreadEventCallback create, remove, reset, addRemoveLink; ProcessEventCallback attach, detach, hook; DWORD current_pid; ThreadTable *thread_table; HANDLE destroy_event; ProcessRecord record[MAX_REGISTER + 1]; HANDLE text_pipes[MAX_REGISTER + 1], cmd_pipes[MAX_REGISTER + 1], recv_threads[MAX_REGISTER + 1]; WORD register_count, new_thread_number; // jichi 1/16/2014: Stop adding new threads when full bool IsFull() const; // { return new_thread_number >= MAX_HOOK; } bool IsEmpty() const { return !new_thread_number; } void HookManager::AddThreadsToProfile(Profile& pf, const ProcessRecord& pr, DWORD pid); }; // EOF