热补丁Hook链表管理

Core Objects

已于 2023-03-27 16:28:02 修改

阅读量61

点赞数

分类专栏： windows 文章标签：链表 windows c++ 数据结构

于 2023-03-27 16:25:45 首次发布

本文链接：https://blog.csdn.net/qq_40363731/article/details/129798094

版权

windows 专栏收录该内容

10 篇文章 0 订阅

订阅专栏

头文件

#pragma once
struct hotfixHookNode {
	struct hotfixHookNode* next;
	PROC m_HookAddr = NULL;
	PROC m_HookTarget = NULL;
};
class HotFixHook {
public:
	HotFixHook();
	~HotFixHook();
	void SetHook(PROC fpWin32Api, PROC fpTarget);

	void InsertHookNode(PROC fpWin32Api, PROC fpTarget);

	void UnLoadHook(PROC fpWin32Api);

	void ReLoadAllHook();
private:
	hotfixHookNode* hooknode;
};

源文件

#include "pch.h"
#include "HotFixHook.h"

HotFixHook::HotFixHook() {
	hooknode = nullptr;
}

HotFixHook::~HotFixHook() {
	hotfixHookNode* curHookNode = hooknode;
	while (curHookNode) {
		UnLoadHook(curHookNode->m_HookAddr);
		hotfixHookNode* tempHookNode = curHookNode;
		curHookNode = curHookNode->next;
		delete tempHookNode;
	}
	hooknode = nullptr;
}

void HotFixHook::SetHook(PROC fpWin32Api, PROC fpTarget) {

	unsigned char ucShortJmp[2] = { 0xEB,0xF9 };
	unsigned char ucNewCode[5] = { 0xE9 };
	*(DWORD*)(ucNewCode + 1) = (DWORD)fpTarget - (DWORD)fpWin32Api;
	DWORD dwOld;
	BOOL bRet = VirtualProtect((LPVOID)((DWORD)fpWin32Api - 5), 7, PAGE_EXECUTE_READWRITE, &dwOld);
	if (bRet) {
		memcpy((LPVOID)((DWORD)fpWin32Api - 5), ucNewCode, 5);
		memcpy(fpWin32Api, ucShortJmp, 2);
		InsertHookNode(fpWin32Api, fpTarget);
	}
	VirtualProtect((LPVOID)((DWORD)fpWin32Api - 5), 7, dwOld, &dwOld);
}

void HotFixHook::InsertHookNode(PROC fpWin32Api, PROC fpTarget) {
	hotfixHookNode* curHookNode;
	if (hooknode == nullptr) {
		hooknode = new hotfixHookNode;
		hooknode->next = nullptr;
		curHookNode = hooknode;
	}
	else {
		curHookNode = hooknode;
		while (curHookNode->next) {
			curHookNode = curHookNode->next;
		}
		curHookNode->next = new struct hotfixHookNode;
		curHookNode = curHookNode->next;
		curHookNode->next = nullptr;
	}
	curHookNode->m_HookAddr = fpWin32Api;
	curHookNode->m_HookTarget = fpTarget;
}

void HotFixHook::UnLoadHook(PROC fpWin32Api) {
	unsigned char ucCodes[7] = { 0x90,0x90, 0x90, 0x90, 0x90, 0x8B, 0xFF };
	DWORD dwOld;
	BOOL bRet = VirtualProtect((LPVOID)((DWORD)fpWin32Api - 5), 7, PAGE_EXECUTE_READWRITE, &dwOld);
	if (bRet) {
		memcpy((LPVOID)((DWORD)fpWin32Api - 5), ucCodes, 7);
	}
	VirtualProtect((LPVOID)((DWORD)fpWin32Api - 5), 7, dwOld, &dwOld);
}

void HotFixHook::ReLoadAllHook() {
	hotfixHookNode* curHookNode = hooknode;
	unsigned char ucShortJmp[2] = { 0xEB,0xF9 };
	unsigned char ucNewCode[5] = { 0xE9 };
	while (curHookNode) {
		*(DWORD*)(ucNewCode + 1) = (DWORD)curHookNode->m_HookTarget - (DWORD)curHookNode->m_HookAddr;
		DWORD dwOld;
		BOOL bRet = VirtualProtect((LPVOID)((DWORD)curHookNode->m_HookAddr - 5), 7, PAGE_EXECUTE_READWRITE, &dwOld);
		if (bRet) {
			memcpy((LPVOID)((DWORD)curHookNode->m_HookAddr - 5), ucNewCode, 5);
			memcpy(curHookNode->m_HookAddr, ucShortJmp, 2);
		}
		VirtualProtect((LPVOID)((DWORD)curHookNode->m_HookAddr - 5), 7, dwOld, &dwOld);
		curHookNode = curHookNode->next;
	}
}