hooks.h

Go to the documentation of this file.

 
#pragma once
 
#include <windows.h>
#include "function_resolver.h"
 
#include <iostream>
#include <string>
#include <map>
#include "peconv/buffer_util.h"
 
namespace peconv {

    class PatchBackup {
    public:
        PatchBackup()
            : buffer(nullptr), bufferSize(0), sourcePtr(nullptr)
        {
        }
 
        ~PatchBackup() {
            deleteBackup();
        }

        void deleteBackup()
        {
            if (buffer) {
                delete[] buffer;
                buffer = nullptr;
                bufferSize = 0;
                sourcePtr = nullptr;
            }
        }

        bool makeBackup(BYTE *patch_ptr, size_t patch_size);

        bool applyBackup();

        bool isBackup()
        {
            return buffer != nullptr;
        }
 
    protected:
        BYTE *buffer;
        size_t bufferSize;
 
        BYTE *sourcePtr;
    };
 

    class hooking_func_resolver : peconv::default_func_resolver {
    public:
        void add_hook(const std::string &name, FARPROC function)
        {
            hooks_map[name] = function;
        }

        void replace_dll(std::string dll_name, const std::string &new_dll)
        {
            dll_replacements_map[dll_name] = new_dll;
        }

        virtual FARPROC resolve_func(LPCSTR lib_name, LPCSTR func_name);
 
    private:
        std::map<std::string, FARPROC> hooks_map;
        std::map<std::string, std::string> dll_replacements_map;
    };

    size_t redirect_to_local64(void *ptr, ULONGLONG new_offset, PatchBackup* backup = nullptr);

    size_t redirect_to_local32(void *ptr, DWORD new_offset, PatchBackup* backup = nullptr);

    size_t redirect_to_local(void *ptr, void* new_function_ptr, PatchBackup* backup = nullptr);

    bool replace_target(BYTE *ptr, ULONGLONG dest_addr);
 
};//namespace peconv