Sanhei/segatools
1
0
Fork 0
forked from Dniel97/segatools
Code Pull Requests Activity

createprocess: add replace_all flag

Browse Source
This commit is contained in:
Hay1tsme 2023-09-15 19:57:11 -04:00
parent 5a4e947354
commit 528ec4379c
3 changed files with 18 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
carolhook/dllmain.c
View File

@ -124,7 +124,7 @@ static DWORD CALLBACK carol_pre_startup(void)
goto fail; goto fail;
} }
hr = createprocess_push_hook_a(".\\15312firm\\firmupdate_1113.exe", "inject -d -k carolhook.dll ", NULL); hr = createprocess_push_hook_a(".\\15312firm\\firmupdate_1113.exe", "inject -d -k carolhook.dll ", NULL, false);
if (FAILED(hr)) { if (FAILED(hr)) {
goto fail; goto fail;

19
hooklib/createprocess.c
View File

@ -86,7 +86,7 @@ static size_t process_nsyms_w = 0;
static CRITICAL_SECTION createproc_lock; static CRITICAL_SECTION createproc_lock;
HRESULT createprocess_push_hook_w(const wchar_t *name, const wchar_t *head, const wchar_t *tail) { HRESULT createprocess_push_hook_w(const wchar_t *name, const wchar_t *head, const wchar_t *tail, bool replace_all) {
struct process_hook_sym_w *new_mem; struct process_hook_sym_w *new_mem;
struct process_hook_sym_w *new_proc; struct process_hook_sym_w *new_proc;
HRESULT hr; HRESULT hr;
@ -112,6 +112,7 @@ HRESULT createprocess_push_hook_w(const wchar_t *name, const wchar_t *head, cons
new_proc->name = name; new_proc->name = name;
new_proc->head = head; new_proc->head = head;
new_proc->tail = tail; new_proc->tail = tail;
new_proc->replace_all = replace_all;
process_syms_w = new_mem; process_syms_w = new_mem;
process_nsyms_w++; process_nsyms_w++;
@ -120,7 +121,7 @@ HRESULT createprocess_push_hook_w(const wchar_t *name, const wchar_t *head, cons
return S_OK; return S_OK;
} }
HRESULT createprocess_push_hook_a(const char *name, const char *head, const char *tail) { HRESULT createprocess_push_hook_a(const char *name, const char *head, const char *tail, bool replace_all) {
struct process_hook_sym_a *new_mem; struct process_hook_sym_a *new_mem;
struct process_hook_sym_a *new_proc; struct process_hook_sym_a *new_proc;
@ -146,6 +147,7 @@ HRESULT createprocess_push_hook_a(const char *name, const char *head, const char
new_proc->name = name; new_proc->name = name;
new_proc->head = head; new_proc->head = head;
new_proc->tail = tail; new_proc->tail = tail;
new_proc->replace_all = replace_all;
process_syms_a = new_mem; process_syms_a = new_mem;
process_nsyms_a++; process_nsyms_a++;
@ -184,17 +186,20 @@ static BOOL WINAPI my_CreateProcessA(
) )
{ {
for (int i = 0; i < process_nsyms_a; i++) { for (int i = 0; i < process_nsyms_a; i++) {
if (strncmp(process_syms_a->name, lpCommandLine, strlen(process_syms_a->name))) { if (strncmp(process_syms_a[i].name, lpCommandLine, strlen(process_syms_a[i].name))) {
continue; continue;
} }
dprintf("CreateProcess: Hooking child process %s %s\n", lpApplicationName, lpCommandLine); dprintf("CreateProcess: Hooking child process %s %s\n", lpApplicationName, lpCommandLine);
char new_cmd[MAX_PATH] = {0}; char new_cmd[MAX_PATH] = {0};
strcat_s(new_cmd, MAX_PATH, process_syms_a->head); strcat_s(new_cmd, MAX_PATH, process_syms_a[i].head);
strcat_s(new_cmd, MAX_PATH, lpCommandLine);
if (process_syms_a->tail != NULL) { if (!process_syms_a[i].replace_all) {
strcat_s(new_cmd, MAX_PATH, process_syms_a->tail); strcat_s(new_cmd, MAX_PATH, lpCommandLine);
}
if (process_syms_a[i].tail != NULL) {
strcat_s(new_cmd, MAX_PATH, process_syms_a[i].tail);
} }
dprintf("CreateProcess: Replaced CreateProcessA %s\n", new_cmd); dprintf("CreateProcess: Replaced CreateProcessA %s\n", new_cmd);

13
hooklib/createprocess.h
View File

@ -1,24 +1,21 @@
#pragma once #pragma once
#include <windows.h> #include <windows.h>
#include <stdbool.h>
HRESULT createprocess_push_hook_w(const wchar_t *name, const wchar_t *head, const wchar_t *tail); HRESULT createprocess_push_hook_w(const wchar_t *name, const wchar_t *head, const wchar_t *tail, bool replace_all);
HRESULT createprocess_push_hook_a(const char *name, const char *head, const char *tail); HRESULT createprocess_push_hook_a(const char *name, const char *head, const char *tail, bool replace_all);
struct process_hook_sym_w { struct process_hook_sym_w {
const wchar_t *name; const wchar_t *name;
size_t name_size;
const wchar_t *head; const wchar_t *head;
size_t head_size;
const wchar_t *tail; const wchar_t *tail;
size_t tail_size; bool replace_all;
}; };
struct process_hook_sym_a { struct process_hook_sym_a {
const char *name; const char *name;
size_t name_size;
const char *head; const char *head;
size_t head_size;
const char *tail; const char *tail;
size_t tail_size; bool replace_all;
}; };