/
Patch7zCP.cpp
207 lines (169 loc) · 5.85 KB
/
Patch7zCP.cpp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
#include "utils.hpp"
#include "sysutils.hpp"
//#############################################################################
//#############################################################################
static UINT orig_oemCP = 0, orig_ansiCP = 0;
static UINT over_oemCP = 0, over_ansiCP = 0;
static bool patched_7z_dll = false;
//#############################################################################
struct patched
{
static UINT WINAPI GetOEMCP(void)
{
return over_oemCP;
}
static UINT WINAPI GetACP(void)
{
return over_ansiCP;
}
static int WINAPI MultiByteToWideChar(
UINT cp,
DWORD flags,
LPCCH lpMultiByte,
int cbMultiByte,
LPWSTR lpWide,
int cchWide
){
if (cp == CP_OEMCP)
cp = over_oemCP;
else if (cp == CP_ACP || cp == CP_THREAD_ACP)
cp = over_ansiCP;
return ::MultiByteToWideChar(
cp, flags, lpMultiByte,cbMultiByte, lpWide,cchWide);
}
static int WINAPI WideCharToMultiByte(
UINT cp,
DWORD flags,
LPCWCH lpWide,
int cchWide,
LPSTR lpMultiByte,
int cbMultiByte,
LPCCH lpDef,
LPBOOL lpUsedDef
){
if (cp == CP_OEMCP)
cp = over_oemCP;
else if (cp == CP_ACP || cp == CP_THREAD_ACP)
cp = over_ansiCP;
return ::WideCharToMultiByte(
cp, flags, lpWide,cchWide, lpMultiByte,cbMultiByte, lpDef,lpUsedDef);
}
};
//#############################################################################
//#############################################################################
typedef const IMAGE_THUNK_DATA * PCImgThunkData;
typedef DWORD RVA;
static __inline PIMAGE_NT_HEADERS WINAPI PinhFromImageBase(HMODULE hmod)
{
return PIMAGE_NT_HEADERS(PBYTE(hmod) + PIMAGE_DOS_HEADER(hmod)->e_lfanew);
}
template <class X> X PFromRva(HMODULE m, RVA rva) { return X(PBYTE(m) + rva); }
static __inline unsigned CountOfImports(PCImgThunkData pitdBase)
{
unsigned cRet = 0;
PCImgThunkData pitd = pitdBase;
while (pitd->u1.Function) { pitd++; cRet++; }
return cRet;
}
//#############################################################################
static bool patch_IAT(void **ppIAT, const void *pf)
{
MEMORY_BASIC_INFORMATION mbi;
::VirtualQuery((LPCVOID)ppIAT, &mbi, sizeof(mbi));
DWORD prot;
switch (mbi.Protect) {
case PAGE_READWRITE:
case PAGE_EXECUTE_READWRITE:
*ppIAT = (void *)pf;
return true;
case PAGE_READONLY:
prot = PAGE_READWRITE;
break;
default: // PAGE_EXECUTE, PAGE_EXECUTE_READ
prot = PAGE_EXECUTE_READWRITE;
break;
}
if (!::VirtualProtect(mbi.BaseAddress, mbi.RegionSize, prot, &prot))
return false;
*ppIAT = (void *)pf;
::VirtualProtect(mbi.BaseAddress, mbi.RegionSize, mbi.Protect, &prot);
return true;
}
//#############################################################################
static bool patch_7z_dll()
{
static const char dll_7z[] = "7z.dll";
static const char dll_kernel[] = "kernel32.dll";
static const char f_GetOEMCP[] = "GetOEMCP";
static const char f_GetACP[] = "GetACP";
static const char f_MultiByteToWideChar[] = "MultiByteToWideChar";
static const char f_WideCharToMultiByte[] = "WideCharToMultiByte";
HMODULE hm = ::GetModuleHandleA("7z.dll");
if (!hm)
return false;
auto pinh = PinhFromImageBase(hm);
if (pinh->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].Size <= 0)
return false;
int n_patched = 0;
auto pid = PFromRva<PIMAGE_IMPORT_DESCRIPTOR>(
hm, pinh->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].VirtualAddress);
while (pid->OriginalFirstThunk)
{
auto szDllCur = PFromRva<LPCSTR>(hm, pid->Name);
if (0 == _memicmp(szDllCur, dll_kernel, sizeof(dll_kernel)))
{
auto pINT = PFromRva<PCImgThunkData>(hm, pid->OriginalFirstThunk);
auto ppfnIATEntry = PFromRva<FARPROC*>(hm, pid->FirstThunk);
size_t cpfnIATEntries = CountOfImports(PCImgThunkData(ppfnIATEntry));
FARPROC *ppfnIATEntryMax = ppfnIATEntry + cpfnIATEntries;
for (unsigned iIAT = 0; ppfnIATEntry < ppfnIATEntryMax; ppfnIATEntry++, iIAT++)
{
PCImgThunkData pitd = &(pINT[iIAT]);
if (IMAGE_SNAP_BY_ORDINAL(pitd->u1.Ordinal))
continue;
auto func = LPCSTR(PFromRva<PIMAGE_IMPORT_BY_NAME>(hm, RVA(UINT_PTR(pitd->u1.AddressOfData)))->Name);
FARPROC pf = nullptr;
if (0 == memcmp(func, f_GetOEMCP, sizeof(f_GetOEMCP)))
pf = (FARPROC)patched::GetOEMCP;
else if (0 == memcmp(func, f_GetACP, sizeof(f_GetACP)))
pf = (FARPROC)patched::GetACP;
else if (0 == memcmp(func, f_MultiByteToWideChar, sizeof(f_MultiByteToWideChar)))
pf = (FARPROC)patched::MultiByteToWideChar;
else if (0 == memcmp(func, f_WideCharToMultiByte, sizeof(f_WideCharToMultiByte)))
pf = (FARPROC)patched::WideCharToMultiByte;
if (pf != nullptr && patch_IAT((void **)ppfnIATEntry, pf))
++n_patched;
}
}
++pid;
}
return n_patched > 0;
}
//#############################################################################
//#############################################################################
static bool is_valid_cp(UINT cp)
{
CPINFO cpinfo;
return cp > CP_THREAD_ACP && ::GetCPInfo(cp, &cpinfo) != FALSE;
}
//#############################################################################
void Patch7zCP::SetCP(UINT oemCP, UINT ansiCP)
{
if (orig_oemCP == 0)
orig_oemCP = over_oemCP = ::GetOEMCP();
if (orig_ansiCP == 0)
orig_ansiCP = over_ansiCP = ::GetACP();
if (!is_valid_cp(oemCP))
oemCP = orig_oemCP;
if (!is_valid_cp(ansiCP))
ansiCP = orig_ansiCP;
over_oemCP = oemCP;
over_ansiCP = ansiCP;
if (!patched_7z_dll && (orig_oemCP != oemCP || orig_ansiCP != ansiCP))
{
patch_7z_dll();
patched_7z_dll = true;
}
}
//#############################################################################
//#############################################################################