396 lines
9.8 KiB
C++
396 lines
9.8 KiB
C++
#if !defined(AFX_UNTIL_CPP_INCLUDED)
|
||
#define AFX_UNTIL_CPP_INCLUDED
|
||
#include <windows.h>
|
||
#include <process.h>
|
||
#include <Tlhelp32.h>
|
||
#include <Wtsapi32.h>
|
||
#include <wininet.h>
|
||
#pragma comment(lib, "Wtsapi32.lib")
|
||
#include "until.h"
|
||
|
||
unsigned int __stdcall ThreadLoader(LPVOID param)
|
||
{
|
||
unsigned int nRet = 0;
|
||
try
|
||
{
|
||
THREAD_ARGLIST arg;
|
||
memcpy(&arg, param, sizeof(arg));
|
||
SetEvent(arg.hEventTransferArg);
|
||
// Óë׿Ãæ½»»¥
|
||
if (arg.bInteractive)
|
||
SelectDesktop(NULL);
|
||
|
||
nRet = arg.start_address(arg.arglist);
|
||
}catch(...){
|
||
};
|
||
return nRet;
|
||
}
|
||
|
||
HANDLE MyCreateThread (LPSECURITY_ATTRIBUTES lpThreadAttributes, // SD
|
||
SIZE_T dwStackSize, // initial stack size
|
||
LPTHREAD_START_ROUTINE lpStartAddress, // thread function
|
||
LPVOID lpParameter, // thread argument
|
||
DWORD dwCreationFlags, // creation option
|
||
LPDWORD lpThreadId, bool bInteractive)
|
||
{
|
||
HANDLE hThread = INVALID_HANDLE_VALUE;
|
||
THREAD_ARGLIST arg;
|
||
arg.start_address = (unsigned ( __stdcall *)( void * ))lpStartAddress;
|
||
arg.arglist = (void *)lpParameter;
|
||
arg.bInteractive = bInteractive;
|
||
arg.hEventTransferArg = CreateEvent(NULL, false, false, NULL);
|
||
hThread = (HANDLE)_beginthreadex((void *)lpThreadAttributes, dwStackSize, ThreadLoader, &arg, dwCreationFlags, (unsigned *)lpThreadId);
|
||
WaitForSingleObject(arg.hEventTransferArg, INFINITE);
|
||
CloseHandle(arg.hEventTransferArg);
|
||
|
||
return hThread;
|
||
}
|
||
|
||
DWORD GetProcessID(LPCTSTR lpProcessName)
|
||
{
|
||
DWORD RetProcessID = 0;
|
||
HANDLE handle=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
|
||
PROCESSENTRY32* info=new PROCESSENTRY32;
|
||
info->dwSize=sizeof(PROCESSENTRY32);
|
||
|
||
if(Process32First(handle,info))
|
||
{
|
||
if (lstrcmpi(info->szExeFile,lpProcessName) == 0)
|
||
{
|
||
RetProcessID = info->th32ProcessID;
|
||
return RetProcessID;
|
||
}
|
||
while(Process32Next(handle,info) != FALSE)
|
||
{
|
||
if (lstrcmpi(info->szExeFile,lpProcessName) == 0)
|
||
{
|
||
RetProcessID = info->th32ProcessID;
|
||
return RetProcessID;
|
||
}
|
||
}
|
||
}
|
||
return RetProcessID;
|
||
}
|
||
|
||
TCHAR *GetLogUserXP()
|
||
{
|
||
TCHAR *szLogName = NULL;
|
||
DWORD dwSize = 0;
|
||
if (WTSQuerySessionInformation(WTS_CURRENT_SERVER_HANDLE, WTS_CURRENT_SESSION, WTSUserName, &szLogName, &dwSize))
|
||
{
|
||
TCHAR *lpUser = new TCHAR[256];
|
||
lstrcpy(lpUser, szLogName);
|
||
WTSFreeMemory(szLogName);
|
||
return lpUser;
|
||
}
|
||
else
|
||
return NULL;
|
||
}
|
||
|
||
TCHAR *GetLogUser2K()
|
||
{
|
||
DWORD dwProcessID = GetProcessID(_T("explorer.exe"));
|
||
if (dwProcessID == 0)
|
||
return NULL;
|
||
|
||
BOOL fResult = FALSE;
|
||
HANDLE hProc = NULL;
|
||
HANDLE hToken = NULL;
|
||
TOKEN_USER *pTokenUser = NULL;
|
||
TCHAR *lpUserName = NULL;
|
||
__try
|
||
{
|
||
// Open the process with PROCESS_QUERY_INFORMATION access
|
||
hProc = OpenProcess(PROCESS_QUERY_INFORMATION, FALSE, dwProcessID);
|
||
if (hProc == NULL)
|
||
{
|
||
__leave;
|
||
}
|
||
fResult = OpenProcessToken(hProc, TOKEN_QUERY, &hToken);
|
||
if(!fResult)
|
||
{
|
||
__leave;
|
||
}
|
||
|
||
DWORD dwNeedLen = 0;
|
||
fResult = GetTokenInformation(hToken,TokenUser, NULL, 0, &dwNeedLen);
|
||
if (dwNeedLen > 0)
|
||
{
|
||
pTokenUser = (TOKEN_USER*)new BYTE[dwNeedLen];
|
||
fResult = GetTokenInformation(hToken,TokenUser, pTokenUser, dwNeedLen, &dwNeedLen);
|
||
if (!fResult)
|
||
{
|
||
__leave;
|
||
}
|
||
}
|
||
else
|
||
{
|
||
__leave;
|
||
}
|
||
|
||
SID_NAME_USE sn;
|
||
TCHAR szDomainName[MAX_PATH];
|
||
DWORD dwDmLen = MAX_PATH;
|
||
|
||
DWORD nNameLen = 256;
|
||
lpUserName = new TCHAR[256];
|
||
|
||
fResult = LookupAccountSid(NULL, pTokenUser->User.Sid, lpUserName, &nNameLen,
|
||
szDomainName, &dwDmLen, &sn);
|
||
}
|
||
__finally
|
||
{
|
||
if (hProc)
|
||
::CloseHandle(hProc);
|
||
if (hToken)
|
||
::CloseHandle(hToken);
|
||
if (pTokenUser)
|
||
delete[] (char*)pTokenUser;
|
||
|
||
// return lpUserName;
|
||
}
|
||
return lpUserName;
|
||
}
|
||
|
||
TCHAR *GetCurrentLoginUser()
|
||
{
|
||
OSVERSIONINFOEX OsVerInfo;
|
||
ZeroMemory(&OsVerInfo, sizeof(OSVERSIONINFOEX));
|
||
OsVerInfo.dwOSVersionInfoSize=sizeof(OSVERSIONINFOEX);
|
||
if(!GetVersionEx((OSVERSIONINFO *)&OsVerInfo))
|
||
{
|
||
OsVerInfo.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);
|
||
if(!GetVersionEx((OSVERSIONINFO *)&OsVerInfo))
|
||
return NULL;
|
||
}
|
||
|
||
if(OsVerInfo.dwMajorVersion == 5 && OsVerInfo.dwMinorVersion == 0)
|
||
return GetLogUser2K();
|
||
else
|
||
return GetLogUserXP();
|
||
|
||
}
|
||
|
||
bool SwitchInputDesktop()
|
||
{
|
||
BOOL bRet = FALSE;
|
||
DWORD dwLengthNeeded;
|
||
|
||
HDESK hOldDesktop, hNewDesktop;
|
||
TCHAR strCurrentDesktop[256], strInputDesktop[256];
|
||
|
||
hOldDesktop = GetThreadDesktop(GetCurrentThreadId());
|
||
memset(strCurrentDesktop, 0, sizeof(strCurrentDesktop));
|
||
GetUserObjectInformation(hOldDesktop, UOI_NAME, &strCurrentDesktop, sizeof(strCurrentDesktop), &dwLengthNeeded);
|
||
|
||
|
||
hNewDesktop = OpenInputDesktop(0, FALSE, MAXIMUM_ALLOWED);
|
||
memset(strInputDesktop, 0, sizeof(strInputDesktop));
|
||
GetUserObjectInformation(hNewDesktop, UOI_NAME, &strInputDesktop, sizeof(strInputDesktop), &dwLengthNeeded);
|
||
|
||
if (lstrcmpi(strInputDesktop, strCurrentDesktop) != 0)
|
||
{
|
||
SetThreadDesktop(hNewDesktop);
|
||
bRet = TRUE;
|
||
}
|
||
CloseDesktop(hOldDesktop);
|
||
|
||
CloseDesktop(hNewDesktop);
|
||
|
||
|
||
return bRet;
|
||
}
|
||
|
||
BOOL SelectHDESK(HDESK new_desktop)
|
||
{
|
||
HDESK old_desktop = GetThreadDesktop(GetCurrentThreadId());
|
||
|
||
DWORD dummy;
|
||
char new_name[256];
|
||
|
||
if (!GetUserObjectInformation(new_desktop, UOI_NAME, &new_name, 256, &dummy)) {
|
||
return FALSE;
|
||
}
|
||
|
||
// Switch the desktop
|
||
if(!SetThreadDesktop(new_desktop)) {
|
||
return FALSE;
|
||
}
|
||
|
||
// Switched successfully - destroy the old desktop
|
||
CloseDesktop(old_desktop);
|
||
|
||
return TRUE;
|
||
}
|
||
|
||
// - SelectDesktop(char *)
|
||
// Switches the current thread into a different desktop, by name
|
||
// Calling with a valid desktop name will place the thread in that desktop.
|
||
// Calling with a NULL name will place the thread in the current input desktop.
|
||
|
||
BOOL SelectDesktop(TCHAR *name)
|
||
{
|
||
HDESK desktop;
|
||
|
||
if (name != NULL)
|
||
{
|
||
// Attempt to open the named desktop
|
||
desktop = OpenDesktop(name, 0, FALSE,
|
||
DESKTOP_CREATEMENU | DESKTOP_CREATEWINDOW |
|
||
DESKTOP_ENUMERATE | DESKTOP_HOOKCONTROL |
|
||
DESKTOP_WRITEOBJECTS | DESKTOP_READOBJECTS |
|
||
DESKTOP_SWITCHDESKTOP | GENERIC_WRITE);
|
||
}
|
||
else
|
||
{
|
||
// No, so open the input desktop
|
||
desktop = OpenInputDesktop(0, FALSE,
|
||
DESKTOP_CREATEMENU | DESKTOP_CREATEWINDOW |
|
||
DESKTOP_ENUMERATE | DESKTOP_HOOKCONTROL |
|
||
DESKTOP_WRITEOBJECTS | DESKTOP_READOBJECTS |
|
||
DESKTOP_SWITCHDESKTOP | GENERIC_WRITE);
|
||
}
|
||
|
||
// Did we succeed?
|
||
if (desktop == NULL) {
|
||
return FALSE;
|
||
}
|
||
|
||
// Switch to the new desktop
|
||
if (!SelectHDESK(desktop)) {
|
||
// Failed to enter the new desktop, so free it!
|
||
CloseDesktop(desktop);
|
||
return FALSE;
|
||
}
|
||
|
||
// We successfully switched desktops!
|
||
return TRUE;
|
||
}
|
||
|
||
BOOL SimulateCtrlAltDel()
|
||
{
|
||
HDESK old_desktop = GetThreadDesktop(GetCurrentThreadId());
|
||
|
||
// Switch into the Winlogon desktop
|
||
if (!SelectDesktop(_T("Winlogon")))
|
||
{
|
||
return FALSE;
|
||
}
|
||
|
||
// Fake a hotkey event to any windows we find there.... :(
|
||
// Winlogon uses hotkeys to trap Ctrl-Alt-Del...
|
||
PostMessage(HWND_BROADCAST, WM_HOTKEY, 0, MAKELONG(MOD_ALT | MOD_CONTROL, VK_DELETE));
|
||
|
||
// Switch back to our original desktop
|
||
if (old_desktop != NULL)
|
||
SelectHDESK(old_desktop);
|
||
|
||
return TRUE;
|
||
}
|
||
BOOL http_get(TCHAR* szURL, TCHAR* szFileName)
|
||
{
|
||
HINTERNET hInternet, hUrl;
|
||
HANDLE hFile;
|
||
TCHAR buffer[1024];
|
||
DWORD dwBytesRead = 0;
|
||
DWORD dwBytesWritten = 0;
|
||
BOOL bIsFirstPacket = TRUE;
|
||
BOOL bRet = TRUE;
|
||
|
||
hInternet = InternetOpen(_T("Mozilla/4.0 (compatible)"), INTERNET_OPEN_TYPE_PRECONFIG, NULL,INTERNET_INVALID_PORT_NUMBER,0);
|
||
if (hInternet == NULL)
|
||
return FALSE;
|
||
|
||
hUrl = InternetOpenUrl(hInternet, szURL, NULL, 0, INTERNET_FLAG_RELOAD, 0);
|
||
if (hUrl == NULL)
|
||
return FALSE;
|
||
|
||
hFile = CreateFile(szFileName, GENERIC_WRITE, 0, NULL, CREATE_ALWAYS, 0, NULL);
|
||
|
||
if (hFile != INVALID_HANDLE_VALUE)
|
||
{
|
||
do
|
||
{
|
||
memset(buffer, 0, sizeof(buffer));
|
||
InternetReadFile(hUrl, buffer, sizeof(buffer), &dwBytesRead);
|
||
// ÓÉÅжϵÚÒ»¸öÊý¾Ý°üÊDz»ÊÇÓÐЧµÄPEÎļþ
|
||
if (bIsFirstPacket && ((PIMAGE_DOS_HEADER)buffer)->e_magic != IMAGE_DOS_SIGNATURE)
|
||
{
|
||
bRet = FALSE;
|
||
break;
|
||
}
|
||
bIsFirstPacket = FALSE;
|
||
|
||
WriteFile(hFile, buffer, dwBytesRead, &dwBytesWritten, NULL);
|
||
} while(dwBytesRead > 0);
|
||
CloseHandle(hFile);
|
||
}
|
||
|
||
InternetCloseHandle(hUrl);
|
||
InternetCloseHandle(hInternet);
|
||
|
||
return bRet;
|
||
}
|
||
|
||
BOOL DebugPrivilege(const char *PName,BOOL bEnable)
|
||
{
|
||
bool bResult = TRUE;
|
||
HANDLE hToken;
|
||
TOKEN_PRIVILEGES TokenPrivileges;
|
||
|
||
|
||
HINSTANCE advapi32 = LoadLibrary("ADVAPI32.dll");
|
||
|
||
typedef BOOL (WINAPI *OPT)(HANDLE ProcessHandle,DWORD DesiredAccess,PHANDLE TokenHandle);
|
||
OPT myopt;
|
||
myopt= (OPT)GetProcAddress(advapi32, "OpenProcessToken");
|
||
|
||
typedef BOOL (WINAPI *ATP)(HANDLE TokenHandle,BOOL DisableAllPrivileges,PTOKEN_PRIVILEGES NewState,DWORD BufferLength,PTOKEN_PRIVILEGES PreviousState,PDWORD ReturnLength);
|
||
ATP myapt;
|
||
myapt= (ATP)GetProcAddress(advapi32, "AdjustTokenPrivileges");
|
||
|
||
typedef BOOL (WINAPI *LPV)(LPCTSTR lpSystemName, LPCTSTR lpName,PLUID lpLuid);
|
||
LPV mylpv;
|
||
#ifdef UNICODE
|
||
mylpv= (LPV)GetProcAddress(advapi32, "LookupPrivilegeValueW");
|
||
#else
|
||
mylpv= (LPV)GetProcAddress(advapi32, "LookupPrivilegeValueA");
|
||
#endif
|
||
|
||
HINSTANCE kernel32 = LoadLibrary("kernel32.dll");
|
||
typedef HANDLE (WINAPI *TGetCurrentProcess)(VOID);
|
||
TGetCurrentProcess myGetCurrentProcess = (TGetCurrentProcess)GetProcAddress(kernel32, "GetCurrentProcess");
|
||
|
||
|
||
if (!myopt(myGetCurrentProcess(), TOKEN_QUERY | TOKEN_ADJUST_PRIVILEGES, &hToken))
|
||
{
|
||
bResult = FALSE;
|
||
return bResult;
|
||
}
|
||
TokenPrivileges.PrivilegeCount = 1;
|
||
TokenPrivileges.Privileges[0].Attributes = bEnable ? SE_PRIVILEGE_ENABLED : 0;
|
||
|
||
|
||
mylpv(NULL, PName, &TokenPrivileges.Privileges[0].Luid);
|
||
|
||
myapt(hToken, FALSE, &TokenPrivileges, sizeof(TOKEN_PRIVILEGES), NULL, NULL);
|
||
|
||
typedef int (WINAPI *GLE)(void);
|
||
GLE myGetLastError;
|
||
HINSTANCE hdlxxe = LoadLibrary("KERNEL32.dll");
|
||
myGetLastError= (GLE)GetProcAddress(hdlxxe, "GetLastError");
|
||
|
||
if (myGetLastError() != ERROR_SUCCESS)
|
||
{
|
||
bResult = FALSE;
|
||
}
|
||
|
||
CloseHandle(hToken);
|
||
if(advapi32)
|
||
FreeLibrary(advapi32);
|
||
if(kernel32)
|
||
FreeLibrary(kernel32);
|
||
return bResult;
|
||
}
|
||
|
||
#endif // !defined(AFX_UNTIL_CPP_INCLUDED)
|