170 lines
4.6 KiB
C++
170 lines
4.6 KiB
C++
// hookman.cc
|
|
// 8/24/2013 jichi
|
|
// Branch IHF/HookManager.cpp, rev 133
|
|
// 8/24/2013 TODO: Clean up this file
|
|
|
|
#ifdef _MSC_VER
|
|
# pragma warning (disable:4100) // C4100: unreference formal parameter
|
|
# pragma warning (disable:4146) // C4146: unary minus operator applied to unsigned type
|
|
#endif // _MSC_VER
|
|
|
|
#include "hookman.h"
|
|
#include "../vnrhook/include/const.h"
|
|
#include "../vnrhook/include/defs.h"
|
|
#include "../vnrhook/include/types.h"
|
|
#include "winmutex.h"
|
|
#include <atlbase.h>
|
|
|
|
#define HM_LOCK CriticalSectionLocker hmLocker(hmCs) // Synchronized scope for accessing private data
|
|
|
|
HookManager::HookManager() :
|
|
create(nullptr),
|
|
remove(nullptr),
|
|
attach(nullptr),
|
|
detach(nullptr),
|
|
nextThreadNumber(0),
|
|
splitDelay(250),
|
|
textThreadsByParams(),
|
|
processRecordsByIds()
|
|
{
|
|
InitializeCriticalSection(&hmCs);
|
|
|
|
// Console text thread
|
|
(textThreadsByParams[{ 0, -1UL, -1UL, -1UL }] = new TextThread({ 0, -1UL, -1UL, -1UL }, nextThreadNumber++, splitDelay))->Status() |= USING_UNICODE;
|
|
}
|
|
|
|
HookManager::~HookManager()
|
|
{
|
|
HM_LOCK;
|
|
DeleteCriticalSection(&hmCs);
|
|
}
|
|
|
|
TextThread *HookManager::FindSingle(DWORD number)
|
|
{
|
|
HM_LOCK;
|
|
for (auto i : textThreadsByParams)
|
|
if (i.second->Number() == number)
|
|
return i.second;
|
|
return nullptr;
|
|
}
|
|
|
|
void HookManager::RemoveSingleHook(DWORD pid, DWORD addr)
|
|
{
|
|
HM_LOCK;
|
|
std::vector<ThreadParameter> removedThreads;
|
|
for (auto i : textThreadsByParams)
|
|
if (i.first.pid == pid && i.first.hook == addr)
|
|
{
|
|
if (remove) remove(i.second);
|
|
delete i.second;
|
|
removedThreads.push_back(i.first);
|
|
}
|
|
for (auto i : removedThreads) textThreadsByParams.erase(i);
|
|
}
|
|
|
|
void HookManager::RemoveProcessContext(DWORD pid)
|
|
{
|
|
HM_LOCK;
|
|
std::vector<ThreadParameter> removedThreads;
|
|
for (auto i : textThreadsByParams)
|
|
if (i.first.pid == pid)
|
|
{
|
|
if (remove) remove(i.second);
|
|
delete i.second;
|
|
removedThreads.push_back(i.first);
|
|
}
|
|
for (auto i : removedThreads) textThreadsByParams.erase(i);
|
|
}
|
|
|
|
void HookManager::RegisterProcess(DWORD pid, HANDLE hostPipe)
|
|
{
|
|
HM_LOCK;
|
|
ProcessRecord record;
|
|
record.hostPipe = hostPipe;
|
|
record.hookman_section = OpenFileMappingW(FILE_MAP_READ, FALSE, (ITH_SECTION_ + std::to_wstring(pid)).c_str());
|
|
record.hookman_map = MapViewOfFile(record.hookman_section, FILE_MAP_READ, 0, 0, HOOK_SECTION_SIZE / 2); // jichi 1/16/2015: Changed to half to hook section size
|
|
record.process_handle = OpenProcess(PROCESS_ALL_ACCESS, FALSE, pid);
|
|
record.hookman_mutex = OpenMutexW(MUTEX_ALL_ACCESS, FALSE, (ITH_HOOKMAN_MUTEX_ + std::to_wstring(pid)).c_str());
|
|
processRecordsByIds[pid] = record;
|
|
if (attach) attach(pid);
|
|
}
|
|
|
|
void HookManager::UnRegisterProcess(DWORD pid)
|
|
{
|
|
HM_LOCK;
|
|
ProcessRecord pr = processRecordsByIds[pid];
|
|
CloseHandle(pr.hookman_mutex);
|
|
UnmapViewOfFile(pr.hookman_map);
|
|
CloseHandle(pr.process_handle);
|
|
CloseHandle(pr.hookman_section);
|
|
processRecordsByIds.erase(pid);
|
|
RemoveProcessContext(pid);
|
|
if (detach) detach(pid);
|
|
}
|
|
|
|
void HookManager::DispatchText(DWORD pid, DWORD hook, DWORD retn, DWORD spl, const BYTE *text, int len)
|
|
{
|
|
// jichi 20/27/2013: When PID is zero, the text comes from console, which I don't need
|
|
if (!text || !pid || len <= 0)
|
|
return;
|
|
HM_LOCK;
|
|
ThreadParameter tp = { pid, hook, retn, spl };
|
|
TextThread *it;
|
|
if ((it = textThreadsByParams[tp]) == nullptr)
|
|
{
|
|
it = textThreadsByParams[tp] = new TextThread(tp, nextThreadNumber++, splitDelay);
|
|
if (GetHookParam(pid, hook).type & USING_UNICODE) it->Status() |= USING_UNICODE;
|
|
if (create) create(it);
|
|
}
|
|
it->AddText(text, len);
|
|
}
|
|
|
|
void HookManager::AddConsoleOutput(std::wstring text)
|
|
{
|
|
HM_LOCK;
|
|
TextThread *console = textThreadsByParams[{ 0, -1UL, -1UL, -1UL }];
|
|
console->AddSentence(std::wstring(text));
|
|
}
|
|
|
|
HANDLE HookManager::GetHostPipe(DWORD pid)
|
|
{
|
|
HM_LOCK;
|
|
return processRecordsByIds[pid].hostPipe;
|
|
}
|
|
|
|
HookParam HookManager::GetHookParam(DWORD pid, DWORD addr)
|
|
{
|
|
HM_LOCK;
|
|
HookParam ret = {};
|
|
ProcessRecord pr = processRecordsByIds[pid];
|
|
if (pr.hookman_map == nullptr) return ret;
|
|
MutexLocker locker(pr.hookman_mutex);
|
|
const Hook* hooks = (const Hook*)pr.hookman_map;
|
|
for (int i = 0; i < MAX_HOOK; ++i)
|
|
if (hooks[i].Address() == addr)
|
|
ret = hooks[i].hp;
|
|
return ret;
|
|
}
|
|
|
|
std::wstring HookManager::GetHookName(DWORD pid, DWORD addr)
|
|
{
|
|
HM_LOCK;
|
|
std::string buffer;
|
|
ProcessRecord pr = processRecordsByIds[pid];
|
|
if (pr.hookman_map == nullptr) return L"";
|
|
MutexLocker locker(pr.hookman_mutex);
|
|
USES_CONVERSION;
|
|
const Hook* hooks = (const Hook*)pr.hookman_map;
|
|
for (int i = 0; i < MAX_HOOK; ++i)
|
|
{
|
|
if (hooks[i].Address() == addr)
|
|
{
|
|
buffer.resize(hooks[i].NameLength());
|
|
ReadProcessMemory(pr.process_handle, hooks[i].Name(), &buffer[0], hooks[i].NameLength(), nullptr);
|
|
}
|
|
}
|
|
return std::wstring(A2W(buffer.c_str()));
|
|
}
|
|
|
|
// EOF
|