Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from http://www.ncbi.nlm.nih.gov/IEB/ToolBox/CPP_DOC/doxyhtml/ncbi__win__hook_8cpp_source.html below:

NCBI C++ ToolKit: src/dbapi/driver/ncbi_win_hook.cpp Source File

)

PCSTR pszCalleeModName,

PCSTR pszCalleeModName,

(::GetProcAddress(::GetModuleHandleA(

),

));

(::GetProcAddress(::GetModuleHandleA(

),

));

HMODULE hmodOriginal,

PVOID

(HMODULE base,

section)

;

BOOLEAN MappedAsImage,

HMODULE hModToolHelp;

PROC pfnCreateToolhelp32Snapshot;

(hModToolHelp !=

) {

pfnCreateToolhelp32Snapshot = ::GetProcAddress(

bResult = (pfnCreateToolhelp32Snapshot !=

);

::FreeLibrary(hModToolHelp);

HMODULE hModPSAPI =

;

bResult = (hModPSAPI !=

);

::FreeLibrary(hModPSAPI);

MEMORY_BASIC_INFORMATION mbi;

((::VirtualQuery(pv, &mbi,

(mbi)) != 0)

? (HMODULE) mbi.AllocationBase :

);

HMODULE hmodOriginal,

PIMAGE_EXPORT_DIRECTORY pExportDir =

PIMAGE_EXPORT_DIRECTORY

IMAGE_DIRECTORY_ENTRY_EXPORT));

(pExportDir ==

) {

PSTR pszDllName =

PSTR

(

(pExportDir->Name) +

(hmodOriginal)

dwFuncNumber = pExportDir->Base;

dwNumberOfExported = pExportDir->NumberOfFunctions;

PDWORD pdwFunctions =

PDWORD

(

(pExportDir->AddressOfFunctions) +

(hmodOriginal));

PWORD

(

(pExportDir->AddressOfNameOrdinals) +

(hmodOriginal));

PDWORD pszFuncNames =

PDWORD

(

(pExportDir->AddressOfNames) +

(hmodOriginal));

(

= 0;

< dwNumberOfExported; ++

, ++pdwFunctions) {

entryPointRVA = *pdwFunctions;

(entryPointRVA == 0) {

(

j = 0; j < pExportDir->NumberOfNames; ++j) {

(pwOrdinals[j] ==

) {

pszExpFunName =

PSTR

(

(pszFuncNames[j]) +

(hmodOriginal));

((pszExpFunName !=

) &&

(

(pszExpFunName, pszFuncName) == 0)

szCalleeModName[MAX_PATH];

szFuncName[MAX_PATH];

{

,

},

{

,

},

{

,

},

{

,

},

{

,

}

m_ModuleHandle(hModule)

(pdest !=

) {

((pszName !=

) && (strlen(pszName))) {

=

[strlen(pszName) + 1];

=

[strlen(

) + 1];

m_pLibHandler(pLibHandler),

m_dwProcessId(dwProcessId)

m_pfnEnumProcesses(

),

m_pfnEnumProcessModules(

),

m_pfnGetModuleFileNameExA(

)

pidArray[1024];

nProcesses = cbNeeded /

(

);

(

= 0;

< nProcesses;

++) {

HMODULE hModuleArray[1024];

pid = pidArray[

];

hProcess = ::OpenProcess(PROCESS_QUERY_INFORMATION |

::CloseHandle(hProcess);

(hModuleArray),

::CloseHandle(hProcess);

nModules = cbNeeded /

(hModuleArray[0]);

(

j = 0; j < nModules; j++) {

HMODULE hModule = hModuleArray[j];

szModuleName[MAX_PATH];

(szModuleName)

pProcess->

(pDllModuleInstance);

::CloseHandle(hProcess);

bPopulateModules)

HMODULE hModuleArray[1024];

hProcess = ::OpenProcess(PROCESS_QUERY_INFORMATION |

(hModuleArray),

::CloseHandle(hProcess);

nModules = cbNeeded /

(hModuleArray[0]);

(

j = 0; j < nModules; j++) {

HMODULE hModule = hModuleArray[j];

szModuleName[MAX_PATH];

(szModuleName)

(bPopulateModules) {

::CloseHandle(hProcess);

(hInstLib !=

) {

::GetProcAddress(hInstLib,

);

::GetProcAddress(hInstLib,

);

::GetProcAddress(hInstLib,

);

::GetProcAddress(hInstLib,

);

::GetProcAddress(hInstLib,

);

::FreeLibrary( hInstLib );

pProcess->

(pDllModuleInstance);

::CloseHandle(hSnapshot);

((dwProcessId !=

) && (dwProcessId != pe32.th32ProcessID)) {

(bPopulateModules) {

(dwProcessId !=

) {

::CloseHandle(hSnapshot);

m_pLibHandler(

)

bPopulateModules)

m_CalleeModHandle(

),

GetSystemInfo(&

);

PVOID pv = * (PVOID*) &

[1];

PCSTR pszCalleeModName,

((pfnCurrent !=

) && (pfnNew !=

)) {

(pProcess !=

) {

PCSTR pszCalleeModName,

(bHookOrRestore ==

) {

PIMAGE_IMPORT_DESCRIPTOR pImportDesc =

PIMAGE_IMPORT_DESCRIPTOR

IMAGE_DIRECTORY_ENTRY_IMPORT));

(pImportDesc ==

) {

(pImportDesc->Name) {

PSTR pszModName = (PSTR)((PBYTE) hmodCaller + pImportDesc->Name);

(

(pszModName, pszCalleeModName) == 0) {

(pImportDesc->Name == 0) {

PIMAGE_THUNK_DATA pThunk =

(PIMAGE_THUNK_DATA)( (PBYTE) hmodCaller + pImportDesc->FirstThunk );

(pThunk->u1.Function) {

PROC* ppfn = (PROC*) &pThunk->u1.Function;

bFound = (*ppfn == pfnCurrent);

PBYTE pbInFunc = (PBYTE) *ppfn;

ppfn = (PROC*) &pbInFunc[1];

bFound = (*ppfn == pfnCurrent);

(::VirtualProtect(ppfn,

&dwOldProtect) ==

::VirtualProtect(ppfn,

(bHookOrRestore) {

(::IsBadReadPtr(pszFullFileName, MAX_PATH) !=

) {

pdest = strrchr(pszFullFileName, ch);

strcpy(pszFullFileName, &pdest[1]);

HMODULE hmodOriginal,

dwFuncOrdinalNum,

strcpy(pszFuncName,

);

PIMAGE_EXPORT_DIRECTORY pExportDir =

PIMAGE_EXPORT_DIRECTORY

IMAGE_DIRECTORY_ENTRY_EXPORT));

(pExportDir ==

) {

PSTR pszDllName =

PSTR

(

(pExportDir->Name) +

(hmodOriginal)

dwFuncNumber = pExportDir->Base;

dwNumberOfExported = pExportDir->NumberOfFunctions;

PDWORD pdwFunctions =

PDWORD

(

(pExportDir->AddressOfFunctions) +

(hmodOriginal));

PWORD

(

(pExportDir->AddressOfNameOrdinals) +

(hmodOriginal));

PDWORD pszFuncNames =

PDWORD

(

(pExportDir->AddressOfNames) +

(hmodOriginal));

(

= 0;

< dwNumberOfExported; ++

, ++pdwFunctions) {

entryPointRVA = *pdwFunctions;

(entryPointRVA == 0) {

(

j = 0; j < pExportDir->NumberOfNames; ++j) {

(pwOrdinals[j] ==

) {

pszExpFunName =

PSTR

(

(pszFuncNames[j]) +

(hmodOriginal));

(dwFuncOrdinalNum == pwOrdinals[j] + 1) {

((pszExpFunName !=

) && (strlen(pszExpFunName) > 0)) {

strcpy(pszFuncName, pszExpFunName);

PCSTR pszCalleeModName,

dwFuncOrdinalNum,

HMODULE hmodOriginal = ::GetModuleHandleA(pszCalleeModName);

HMODULE hmodOriginal,

dwFuncOrdinalNum,

PCSTR pszFuncName)

szFuncName[MAX_PATH];

((pszFuncName) &&

(

(pszFuncName) > 0xFFFF) &&

strlen(pszFuncName)) {

strcpy(szFuncName, pszFuncName);

(

(pszFuncName)),

(strlen(szFuncName) > 0) {

(fn_it != fn_list.

()) {

pHook = fn_it->second;

PCSTR pszFuncName)

szFuncName[MAX_PATH];

((pszFuncName) &&

(

(pszFuncName) > 0xFFFF) &&

strlen(pszFuncName)) {

strcpy(szFuncName, pszFuncName);

(

(pszFuncName)),

(strlen(szFuncName) > 0) {

(fn_it != fn_list.

()) {

pHook = fn_it->second;

(pHook !=

) {

[pHook->GetCalleeModHandle()][pHook->GetFuncName()] =

(pHook !=

) {

fn_list.

(pHook->GetFuncName());

(fn_it != fn_list.

()) {

fn_list.

(fn_it);

fn_list.

(pHook->GetFuncName());

(fn_it != fn_list.

()) {

fn_list.

(fn_it);

m_bSystemFuncsHooked(

)

enabled_from_registry =

;

enabled_from_registry =

;

);

enabled_from_registry =

;

}

(!enabled_from_registry) {

);

(instance.

());

(bResult ==

) {

<<

(bResult ==

) {

<<

(bResult ==

) {

<<

(bResult ==

) {

<<

(bResult ==

) {

<<

PROC pfnOrig =

;

::GetModuleHandleA(pszCalleeModName),

(pfnOrig ==

) {

(

!= hmod) {

::GetModuleHandleA(pszCalleeModName),

(pfnOrig !=

) {

<<

(pHook !=

) {

bResult = pHook->UnHookImport();

((hmod !=

) && ((dwFlags & LOAD_LIBRARY_AS_DATAFILE) == 0))

pHook->ReplaceInOneModule(

pHook->GetCalleeModName(),

pHook->GetPfnOrig(),

pHook->GetPfnHook(),

HMODULE hmod =

;

HMODULE hmod =

;

HMODULE hmod =

;

HMODULE hmod =

;

FARPROC pfn =

;

(pFuncHook !=

) {

pfn = pFuncHook->GetPfnHook();

m_ModDbghelp(

),

m_ImageDirectoryEntryToData(

)

);

);

::FreeLibrary(m_ModDbghelp);

(instance.

());

<<

instance.

();

TRegistry::iterator it = find(

TRegistry::iterator it = find(

(; *left != 0 && *right != 0; ++left, ++right) {

(cl >=

&& cl <=

)

(cr >=

&& cr <=

)

static CNcbiApplication * Instance(void)

Singleton method.

Helper class for object allocation/deallocation.

T & Get(void)

Create the variable if not created yet, return the reference.

~CExeModuleInstance(void)

CExeModuleInstance(CLibHandler *pLibHandler, char *pszName, HMODULE hModule, DWORD dwProcessId)

size_t GetModuleCount(void) const

CModuleInstance * GetModuleByIndex(size_t dwIndex) const

DWORD GetProcessId(void) const

Returns process id.

BOOL PopulateModules(void)

CLibHandler * m_pLibHandler

PROC GetPfnHook(void) const

PROC GetPfnOrig(void) const

BOOL IsMandatory(void)

Indicates whether the hooked function is mandatory one.

HMODULE GetCalleeModHandle(void) const

set< HMODULE > TModuleSet

CHookedFunction(PCSTR pszCalleeModName, PCSTR pszFuncName, PROC pfnOrig, PROC pfnHook)

char m_szCalleeModName[MAX_PATH]

PCSTR GetCalleeModName(void) const

BOOL ReplaceInOneModule(bool bHookOrRestore, PCSTR pszCalleeModName, PROC pfnCurrent, PROC pfnNew, HMODULE hmodCaller)

Replace the address of the function in the IAT of a specific module.

TModuleSet m_HookedModuleSet

Set of hoocked modules.

char m_szFuncName[MAX_PATH]

BOOL HookImport(void)

Set up a new hook function.

BOOL ReplaceInAllModules(bool bHookOrRestore, PCSTR pszCalleeModName, PROC pfnCurrent, PROC pfnNew)

Replace the address of a imported function entry in all modules.

static PVOID sm_pvMaxAppAddr

Maximum private memory address.

PCSTR GetFuncName(void) const

BOOL UnHookImport(void)

Restore the original API handler.

BOOL DoHook(bool bHookOrRestore, PROC pfnCurrent, PROC pfnNew)

Perform actual replacing of function pointers.

HMODULE m_CalleeModHandle

static HMODULE WINAPI LoadLibraryExA(LPCSTR lpLibFileName, HANDLE hFile, DWORD dwFlags)

static HMODULE WINAPI LoadLibraryA(LPCSTR lpLibFileName)

static FLoadLibraryExA sm_FLoadLibraryExA

unsigned long long m_ImageEnd

static FLoadLibraryW sm_FLoadLibraryW

static HMODULE WINAPI LoadLibraryExW(LPCWSTR lpLibFileName, HANDLE hFile, DWORD dwFlags)

static HMODULE WINAPI LoadLibraryW(LPCWSTR lpLibFileName)

static FLoadLibraryExW sm_FLoadLibraryExW

DWORD GetRVAFromExportSection(HMODULE hmodOriginal, PCSTR pszFuncName)

static FExitProcess sm_FExitProcess

static FARPROC WINAPI GetProcAddress(HMODULE hModule, LPCSTR lpProcName)

static FGetProcAddress sm_FGetProcAddress

static VOID WINAPI ExitProcess(UINT uExitCode)

unsigned long long m_ImageStart

PIMAGE_NT_HEADERS m_nt_header

bool IsPatched(const void *addr)

static FLoadLibraryA sm_FLoadLibraryA

unique_ptr< CExeModuleInstance > m_pProcess

virtual BOOL PopulateModules(CModuleInstance *pProcess)=0

CExeModuleInstance * GetExeModuleInstance(void) const

virtual BOOL PopulateProcess(DWORD dwProcessId, BOOL bPopulateModules)=0

virtual ~CLibHandler(void)

char * GetBaseName(void) const

Returns only the filename of the executable file for the process or DLL.

char * GetName(void) const

Returns Full path and filename of the executable file for the process or DLL.

HMODULE GetHandle(void) const

Returns module handle.

TInternalList m_pInternalList

void SetName(char *pszName)

Sets Full path and filename of the executable file for the process or DLL.

void ReleaseModules(void)

void AddModule(CModuleInstance *pModuleInstance)

CModuleInstance(char *pszName, HMODULE hModule)

void SetHandle(HMODULE handle)

vector< CModuleInstance * > TInternalList

static CPEi386 & GetInstance(void)

PVOID(WINAPI * FImageDirectoryEntryToData)(PVOID Base, BOOLEAN MappedAsImage, USHORT DirectoryEntry, PULONG Size)

FImageDirectoryEntryToData m_ImageDirectoryEntryToData

PVOID GetIAT(HMODULE base, int section) const

virtual ~CPsapiHandler(void)

FGetModuleFileNameExA m_pfnGetModuleFileNameExA

FEnumProcesses m_pfnEnumProcesses

virtual BOOL PopulateModules(CModuleInstance *pProcess)

virtual BOOL PopulateProcess(DWORD dwProcessId, BOOL bPopulateModules)

FEnumProcessModules m_pfnEnumProcessModules

The taskManager dynamically decides whether to use ToolHelp library or PSAPI This is a proxy class to...

CExeModuleInstance * GetProcess(void) const

CLibHandler * m_pLibHandler

BOOL PopulateProcess(DWORD dwProcessId, BOOL bPopulateModules) const

container_type::const_iterator const_iterator

container_type::iterator iterator

const_iterator end() const

const_iterator find(const key_type &key) const

iterator_bool insert(const value_type &val)

const_iterator find(const key_type &key) const

const_iterator end() const

parent_type::const_iterator const_iterator

static const char si[8][64]

struct parameters_t * pb[]

const CNcbiRegistry & GetConfig(void) const

Get the application's cached configuration parameters (read-only).

#define ITERATE(Type, Var, Cont)

ITERATE macro to sequence through container elements.

@ eRetriable_No

It makes no sense to retry the action.

#define NCBI_CURRENT_FUNCTION

Get current function name.

#define ERR_POST_X(err_subcode, message)

Error posting with default error code and given error subcode.

#define NCBI_CATCH_ALL_X(err_subcode, message)

#define NCBI_THROW(exception_class, err_code, message)

Generic macro to throw an exception, given the exception class, error code and message string.

void Warning(CExceptionArgs_Base &args)

TErrCode GetErrCode(void) const

virtual const char * GetErrCodeString(void) const

Get error code interpreted as text.

virtual bool GetBool(const string &section, const string &name, bool default_value, TFlags flags=0, EErrAction err_action=eThrow) const

Get boolean value of specified parameter name.

#define END_NCBI_SCOPE

End previously defined NCBI scope.

#define BEGIN_NCBI_SCOPE

Define ncbi namespace.

BOOL UnHookImport(PCSTR pszCalleeModName, PCSTR pszFuncName)

Restore hooked up API function.

void WINAPI HackModuleOnLoad(HMODULE hmod, DWORD dwFlags)

Used when a DLL is newly loaded after hooking a function.

BOOL m_bSystemFuncsHooked

Determines whether all system functions has been successfuly hacked.

void UnHookAllFuncs(void)

void operator=(const CApiHookMgr &)

int my_stricmp(const char *left, const char *right)

vector< TFunct > TRegistry

static FARPROC WINAPI xs_GetProcAddressWindows(HMODULE hmod, PCSTR pszProcName)

Returns original address of the API function.

CHookedFunctions m_pHookedFunctions

Container keeps track of all hacked functions.

virtual const char * GetErrCodeString(void) const

Translate from the error code value to its string representation.

void x_GetFunctionNameByOrdinal(PCSTR pszCalleeModName, DWORD dwFuncOrdinalNum, PSTR pszFuncName) const

Return the name of the function by its ordinal value.

CRef< CHookedFunction > GetHookedFunction(HMODULE hmod, PCSTR pszFuncName) const

Return the address of an CHookedFunction object Protected version.

BOOL HookImport(PCSTR pszCalleeModName, PCSTR pszFuncName, PROC pfnHook)

Hook up an API.

static HMODULE WINAPI MyLoadLibraryExW(PCWSTR pszModuleName, HANDLE hFile, DWORD dwFlags)

Used to trap events when DLLs are loaded.

bool HaveHookedFunctions(void) const

Indicates whether there is hooked function.

static HMODULE WINAPI MyLoadLibraryW(PCWSTR pszModuleName)

Used to trap events when DLLs are loaded.

static COnExitProcess & Instance(void)

static FARPROC WINAPI MyGetProcAddress(HMODULE hmod, PCSTR pszProcName)

Returns address of replacement function if hooked function is requested.

void x_UnHookAllFuncs(void)

Unhook all functions and restore original ones.

void Remove(TFunct funct)

TModuleNameList m_ModuleNameList

CRef< CHookedFunction > GetHookedFunction(PCSTR pszCalleeModName, PCSTR pszFuncName) const

Return the address of an CHookedFunction object.

static HMODULE WINAPI MyLoadLibraryExA(PCSTR pszModuleName, HANDLE hFile, DWORD dwFlags)

Used to trap events when DLLs are loaded.

BOOL RemoveHook(const CRef< CHookedFunction > pHook)

Remove exising object pointer from the container.

BOOL x_RemoveHook(PCSTR pszCalleeModName, PCSTR pszFuncName)

Remove intercepted function from the container.

BOOL x_GetFunctionNameFromExportSection(HMODULE hmodOriginal, DWORD dwFuncOrdinalNum, PSTR pszFuncName) const

Return the name of the function from EAT by its ordinal value.

bool HaveHookedFunctions(void) const

BOOL x_HookSystemFuncs(void)

Hook all needed system functions in order to trap loading libraries.

static void WINAPI xs_ExitProcess(UINT uExitCode)

static CApiHookMgr & GetInstance(void)

static HMODULE WINAPI MyLoadLibraryA(PCSTR pszModuleName)

Used to trap events when DLLs are loaded.

BOOL AddHook(const CRef< CHookedFunction > pHook)

Add a new object to the container.

BOOL x_AddHook(PCSTR pszCalleeModName, PCSTR pszFuncName, PROC pfnOrig, PROC pfnHook)

Add a newly intercepted function to the container.

#define INVALID_HANDLE_VALUE

A value for an invalid file handle.

#define HANDLE

An abstraction for a file handle.

Definition of all error codes used in dbapi libraries (dbapi_driver.lib and others).

static BOOL ExtractModuleFileName(char *pszFullFileName)

BOOL(WINAPI * FProcess32Next)(HANDLE hSnapshot, LPPROCESSENTRY32_A lppe)

static HMODULE ModuleFromAddress(PVOID pv)

BOOL(WINAPI * FModule32Next)(HANDLE hSnapshot, LPMODULEENTRY32_A lpme)

HMODULE(WINAPI * FLoadLibraryExA)(LPCSTR lpLibFileName, HANDLE hFile, DWORD dwFlags)

HANDLE(WINAPI * FCreateToolHelp32Snapshot)(DWORD dwFlags, DWORD th32ProcessID)

static FLoadLibraryA g_LoadLibraryA

BOOL(WINAPI * FEnumProcessModules)(HANDLE hProcess, HMODULE *lphModule, DWORD cb, LPDWORD lpcbNeeded)

HMODULE(WINAPI * FLoadLibraryA)(LPCSTR lpLibFileName)

BOOL(WINAPI * FProcess32First)(HANDLE hSnapshot, LPPROCESSENTRY32_A lppe)

static FGetProcAddress g_FGetProcAddress

HMODULE(WINAPI * FLoadLibraryW)(LPCWSTR lpLibFileName)

VOID(WINAPI * FExitProcess)(UINT uExitCode)

BOOL(WINAPI * FEnumProcesses)(DWORD *lpidProcess, DWORD cb, DWORD *cbNeeded)

static BOOL IsToolHelpSupported(void)

static BOOL IsPsapiSupported(void)

DWORD(WINAPI * FGetModuleFileNameExA)(HANDLE hProcess, HMODULE hModule, LPSTR lpFilename, DWORD nSize)

BOOL(WINAPI * FModule32First)(HANDLE hSnapshot, LPMODULEENTRY32_A lpme)

HMODULE(WINAPI * FLoadLibraryExW)(LPCWSTR lpLibFileName, HANDLE hFile, DWORD dwFlags)

FARPROC(WINAPI * FGetProcAddress)(HMODULE hModule, LPCSTR lpProcName)

const API_FUNC_ID MANDATORY_API_FUNCS[]

int strcmp(const char *str1, const char *str2)

#define TH32CS_SNAPMODULE

#define TRUE

bool replacment for C indicating true.

#define FALSE

bool replacment for C indicating false.

struct tagPROCESSENTRY32 PROCESSENTRY32_A

MODULEENTRY32_A * LPMODULEENTRY32_A

PROCESSENTRY32_A * LPPROCESSENTRY32_A

#define NUMBER_OF_MANDATORY_API_FUNCS

MODULEENTRY32_A * PMODULEENTRY32_A

PROCESSENTRY32_A * PPROCESSENTRY32_A

Defines the CNcbiApplication and CAppException classes for creating NCBI applications.

char szFuncName[MAX_PATH]

char szCalleeModName[MAX_PATH]

RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4