2016-01-05 23:01:17 +08:00
// hookman.cc
// 8/24/2013 jichi
// Branch IHF/HookManager.cpp, rev 133
// 8/24/2013 TODO: Clean up this file
# ifdef _MSC_VER
# pragma warning (disable:4100) // C4100: unreference formal parameter
# pragma warning (disable:4146) // C4146: unary minus operator applied to unsigned type
# endif // _MSC_VER
# include "hookman.h"
# include "vnrhook/include/const.h"
# include "vnrhook/include/defs.h"
# include "vnrhook/include/types.h"
# include <stdio.h>
//#include <emmintrin.h>
# include "profile/Profile.h"
2018-06-19 02:45:16 +08:00
# include "profile/pugixml.h"
2016-01-05 23:01:17 +08:00
# include "profile/misc.h"
2018-06-13 05:31:24 +08:00
# define HM_LOCK CriticalSectionLocker d_locker(hmcs) // Synchronized scope for accessing private data
2016-01-05 23:01:17 +08:00
HookManager : : HookManager ( ) :
2018-07-18 05:01:56 +08:00
current ( nullptr ) ,
create ( nullptr ) ,
remove ( nullptr ) ,
reset ( nullptr ) ,
attach ( nullptr ) ,
detach ( nullptr ) ,
hook ( nullptr ) ,
new_thread_number ( 0 ) ,
2018-07-18 07:18:36 +08:00
textThreadsByParams ( ) ,
2018-07-18 05:01:56 +08:00
processRecordsByIds ( )
2016-01-05 23:01:17 +08:00
{
2018-07-18 07:18:36 +08:00
TextThread * consoleTextThread = textThreadsByParams [ { 0 , - 1UL , - 1UL , - 1UL } ] = new TextThread ( { 0 , - 1UL , - 1UL , - 1UL } , new_thread_number + + , splitDelay ) ;
2018-05-31 17:40:00 +08:00
consoleTextThread - > Status ( ) | = USING_UNICODE ;
SetCurrent ( consoleTextThread ) ;
2018-06-13 05:31:24 +08:00
InitializeCriticalSection ( & hmcs ) ;
2016-01-05 23:01:17 +08:00
}
HookManager : : ~ HookManager ( )
{
2018-07-18 05:01:56 +08:00
DeleteCriticalSection ( & hmcs ) ;
2016-01-05 23:01:17 +08:00
}
TextThread * HookManager : : FindSingle ( DWORD number )
2018-05-31 17:40:00 +08:00
{
2018-07-18 07:18:36 +08:00
for ( auto i : textThreadsByParams )
2018-05-31 17:40:00 +08:00
{
if ( i . second - > Number ( ) = = number )
{
return i . second ;
}
}
return nullptr ;
}
2016-01-05 23:01:17 +08:00
void HookManager : : SetCurrent ( TextThread * it )
{
if ( current )
current - > Status ( ) & = ~ CURRENT_SELECT ;
current = it ;
if ( it )
it - > Status ( ) | = CURRENT_SELECT ;
}
void HookManager : : SelectCurrent ( DWORD num )
{
if ( TextThread * st = FindSingle ( num ) ) {
SetCurrent ( st ) ;
if ( reset )
reset ( st ) ;
//st->ResetEditText();
}
}
void HookManager : : RemoveSingleHook ( DWORD pid , DWORD addr )
{
HM_LOCK ;
2018-06-03 02:29:32 +08:00
std : : vector < ThreadParameter > removedThreads ;
2018-07-18 07:18:36 +08:00
for ( auto i : textThreadsByParams )
2018-05-31 17:40:00 +08:00
{
if ( i . second - > PID ( ) = = pid & & i . second - > Addr ( ) = = addr )
{
if ( remove )
{
remove ( i . second ) ;
}
delete i . second ;
2018-06-03 02:29:32 +08:00
removedThreads . push_back ( i . first ) ;
2018-05-31 17:40:00 +08:00
}
}
2018-06-03 02:29:32 +08:00
for ( auto i : removedThreads )
2018-05-31 18:17:14 +08:00
{
2018-07-18 07:18:36 +08:00
textThreadsByParams . erase ( i ) ;
2016-01-05 23:01:17 +08:00
}
2018-06-03 02:29:32 +08:00
SelectCurrent ( 0 ) ;
2016-01-05 23:01:17 +08:00
}
void HookManager : : RemoveProcessContext ( DWORD pid )
{
2018-06-03 02:29:32 +08:00
HM_LOCK ;
std : : vector < ThreadParameter > removedThreads ;
2018-07-18 07:18:36 +08:00
for ( auto i : textThreadsByParams )
2018-06-03 02:29:32 +08:00
{
if ( i . second - > PID ( ) = = pid )
{
if ( remove )
{
remove ( i . second ) ;
}
delete i . second ;
removedThreads . push_back ( i . first ) ;
}
}
for ( auto i : removedThreads )
{
2018-07-18 07:18:36 +08:00
textThreadsByParams . erase ( i ) ;
2018-06-03 02:29:32 +08:00
}
SelectCurrent ( 0 ) ;
2016-01-05 23:01:17 +08:00
}
2018-06-01 14:36:51 +08:00
void HookManager : : RegisterProcess ( DWORD pid , HANDLE hostPipe )
2016-01-05 23:01:17 +08:00
{
HM_LOCK ;
2018-06-01 14:36:51 +08:00
ProcessRecord * record = processRecordsByIds [ pid ] = new ProcessRecord ;
record - > hostPipe = hostPipe ;
2018-06-14 04:24:52 +08:00
record - > hookman_section = OpenFileMappingW ( FILE_MAP_READ , FALSE , ( ITH_SECTION_ + std : : to_wstring ( pid ) ) . c_str ( ) ) ;
2018-06-01 14:36:51 +08:00
record - > hookman_map = MapViewOfFile ( record - > hookman_section , FILE_MAP_READ , 0 , 0 , HOOK_SECTION_SIZE / 2 ) ; // jichi 1/16/2015: Changed to half to hook section size
record - > process_handle = OpenProcess ( PROCESS_ALL_ACCESS , FALSE , pid ) ;
2018-06-14 04:24:52 +08:00
record - > hookman_mutex = OpenMutexW ( MUTEX_ALL_ACCESS , FALSE , ( ITH_HOOKMAN_MUTEX_ + std : : to_wstring ( pid ) ) . c_str ( ) ) ;
2016-01-05 23:01:17 +08:00
if ( attach )
attach ( pid ) ;
2018-06-01 14:36:51 +08:00
2016-01-05 23:01:17 +08:00
}
void HookManager : : UnRegisterProcess ( DWORD pid )
{
2018-06-03 02:29:32 +08:00
HM_LOCK ;
ProcessRecord pr = * processRecordsByIds [ pid ] ;
CloseHandle ( pr . hookman_mutex ) ;
UnmapViewOfFile ( pr . hookman_map ) ;
CloseHandle ( pr . process_handle ) ;
CloseHandle ( pr . hookman_section ) ;
2018-06-04 00:47:16 +08:00
processRecordsByIds . erase ( pid ) ;
2016-01-05 23:01:17 +08:00
RemoveProcessContext ( pid ) ;
2018-06-03 02:29:32 +08:00
2016-01-05 23:01:17 +08:00
if ( detach )
detach ( pid ) ;
}
2018-06-18 09:04:04 +08:00
void HookManager : : DispatchText ( DWORD pid , const BYTE * text , DWORD hook , DWORD retn , DWORD spl , int len )
2016-01-05 23:01:17 +08:00
{
// jichi 20/27/2013: When PID is zero, the text comes from console, which I don't need
2018-06-18 09:04:04 +08:00
if ( ! text | | ! pid | | len < = 0 )
2016-01-05 23:01:17 +08:00
return ;
HM_LOCK ;
ThreadParameter tp = { pid , hook , retn , spl } ;
TextThread * it ;
2018-07-18 07:18:36 +08:00
if ( ! ( it = textThreadsByParams [ tp ] ) )
2018-06-01 14:36:51 +08:00
{
2018-07-18 07:18:36 +08:00
it = textThreadsByParams [ tp ] = new TextThread ( tp , new_thread_number + + , splitDelay ) ;
2018-06-01 14:36:51 +08:00
if ( create )
{
create ( it ) ;
}
}
2018-07-12 08:18:04 +08:00
it - > AddText ( text , len ) ;
2016-01-05 23:01:17 +08:00
}
void HookManager : : AddConsoleOutput ( LPCWSTR text )
{
2018-06-01 14:36:51 +08:00
if ( text )
{
int len = wcslen ( text ) * 2 ;
2018-07-18 07:18:36 +08:00
TextThread * console = textThreadsByParams [ { 0 , - 1UL , - 1UL , - 1UL } ] ;
2018-07-12 08:18:04 +08:00
console - > AddSentence ( std : : wstring ( text ) ) ;
2016-01-05 23:01:17 +08:00
}
}
void HookManager : : ClearCurrent ( )
{
HM_LOCK ;
if ( current ) {
current - > Reset ( ) ;
if ( reset )
reset ( current ) ;
}
}
ProcessRecord * HookManager : : GetProcessRecord ( DWORD pid )
{
HM_LOCK ;
2018-06-01 14:36:51 +08:00
return processRecordsByIds [ pid ] ;
2016-01-05 23:01:17 +08:00
}
2018-07-18 05:01:56 +08:00
HANDLE HookManager : : GetHostPipe ( DWORD pid )
2016-01-05 23:01:17 +08:00
{
HM_LOCK ;
2018-06-01 14:36:51 +08:00
return processRecordsByIds [ pid ] ? processRecordsByIds [ pid ] - > hostPipe : nullptr ;
2016-01-05 23:01:17 +08:00
}
2018-07-18 07:18:36 +08:00
Hook HookManager : : GetHook ( DWORD processId , DWORD addr )
{
HM_LOCK ;
return hooksByAddresses [ { processId , addr , 0 , 0 } ] ;
}
void HookManager : : SetHook ( DWORD processId , DWORD addr , Hook hook )
{
HM_LOCK ;
hooksByAddresses [ { processId , addr , 0 , 0 } ] = hook ;
}
2016-01-05 23:01:17 +08:00
void AddHooksToProfile ( Profile & pf , const ProcessRecord & pr ) ;
DWORD AddThreadToProfile ( Profile & pf , const ProcessRecord & pr , TextThread * thread ) ;
void MakeHookRelative ( const ProcessRecord & pr , HookParam & hp ) ;
void HookManager : : GetProfile ( DWORD pid , pugi : : xml_node profile_node )
{
const ProcessRecord * pr = GetProcessRecord ( pid ) ;
if ( pr = = NULL )
return ;
Profile pf ( L " serialize " ) ;
AddHooksToProfile ( pf , * pr ) ;
AddThreadsToProfile ( pf , * pr , pid ) ;
pf . XmlWriteProfile ( profile_node ) ;
}
void AddHooksToProfile ( Profile & pf , const ProcessRecord & pr )
{
WaitForSingleObject ( pr . hookman_mutex , 0 ) ;
2018-07-18 07:18:36 +08:00
auto hooks = ( const OldHook * ) pr . hookman_map ;
2016-01-05 23:01:17 +08:00
for ( DWORD i = 0 ; i < MAX_HOOK ; + + i )
{
if ( hooks [ i ] . Address ( ) = = 0 )
continue ;
auto & hook = hooks [ i ] ;
DWORD type = hook . Type ( ) ;
if ( ( type & HOOK_ADDITIONAL ) & & ( type & HOOK_ENGINE ) = = 0 )
{
std : : unique_ptr < CHAR [ ] > name ( new CHAR [ hook . NameLength ( ) ] ) ;
if ( ReadProcessMemory ( pr . process_handle , hook . Name ( ) , name . get ( ) , hook . NameLength ( ) , NULL ) )
{
if ( hook . hp . module )
{
HookParam hp = hook . hp ;
MakeHookRelative ( pr , hp ) ;
pf . AddHook ( hook_ptr ( new HookProfile ( hp , toUnicodeString ( name . get ( ) ) ) ) ) ;
}
else
pf . AddHook ( hook_ptr ( new HookProfile ( hook . hp , toUnicodeString ( name . get ( ) ) ) ) ) ;
}
}
}
ReleaseMutex ( pr . hookman_mutex ) ;
}
void MakeHookRelative ( const ProcessRecord & pr , HookParam & hp )
{
MEMORY_BASIC_INFORMATION info ;
VirtualQueryEx ( pr . process_handle , ( LPCVOID ) hp . address , & info , sizeof ( info ) ) ;
hp . address - = ( DWORD ) info . AllocationBase ;
hp . function = 0 ;
}
void HookManager : : AddThreadsToProfile ( Profile & pf , const ProcessRecord & pr , DWORD pid )
{
HM_LOCK ;
2018-06-03 02:29:32 +08:00
AddThreadToProfile ( pf , pr , current ) ;
2016-01-05 23:01:17 +08:00
}
DWORD AddThreadToProfile ( Profile & pf , const ProcessRecord & pr , TextThread * thread )
{
const ThreadParameter * tp = thread - > GetThreadParameter ( ) ;
std : : wstring hook_name = GetHookNameByAddress ( pr , tp - > hook ) ;
if ( hook_name . empty ( ) )
return - 1 ;
auto thread_profile = new ThreadProfile ( hook_name , tp - > retn , tp - > spl , 0 , 0 ,
THREAD_MASK_RETN | THREAD_MASK_SPLIT , L " " ) ;
DWORD threads_size = pf . Threads ( ) . size ( ) ;
int thread_profile_index = pf . AddThread ( thread_ptr ( thread_profile ) ) ;
if ( thread_profile_index = = threads_size ) // new thread
{
WORD iw = thread_profile_index & 0xFFFF ;
if ( thread - > Status ( ) & CURRENT_SELECT )
pf . SelectedIndex ( ) = iw ;
}
return thread_profile_index ; // in case more than one thread links to the same thread
}
// EOF