#include <stdio.h>
#include <stdlib.h>
#include <Windows.h>
#include <string>
#include "mhook-lib/mhook.h"

class A
{
private:
    int m_data;
    char* m_sz[20];

public:
    int setMsg(const char* pstr, int data)
    {
        if (pstr != NULL && *(char*)pstr != '\0')
        {
            memcpy(m_sz, pstr, 20);
        }

        m_data = data;

        return 0;
    }


    void showMsg()
    {
        if (m_sz[0] != '\0')
        {
            printf("%s,%d\n", m_sz,m_data);
        }
    }


};



typedef int (__thiscall A::* TYPE_Ptr)(const char* pstr, int data);

//注意这里的第二个参数notUsed一定要保留,它对应的就是fastcall中的edx.
typedef int (__fastcall * TYPE_setMsgPtr)(void* pthis,  void* notUsed, const char*, int);

TYPE_setMsgPtr pNew;


int __fastcall HookSetMsg(void * pThis ,void * notUsed, const char* pstr, int data)
{

    printf("hook new function\n");
    return pNew(pThis, notUsed, pstr, data);
}




TYPE_setMsgPtr pfnSetMsg = NULL;

//实现hook thiscall 的方法，不需要用naked汇编
int main(int argc, char **argv)
{
    A* theA = new A();
    theA->setMsg("hello A!", 12);
    
    theA->showMsg();

    TYPE_Ptr px = &A::setMsg;
    int x = *(int*)&px;

    //printf("%p,%p\n", px, x);

    pNew = (TYPE_setMsgPtr)x;
    Mhook_SetHook((PVOID*)&pNew, HookSetMsg);

    theA->setMsg("hello B!", 14);
    theA->showMsg();

    theA->setMsg("hello C!", 1);
    theA->showMsg();

    return 0;
}

#include <iostream>
#include <string>
#include <cstring>

#include <easyhook.h>

int _tmain(int argc, _TCHAR* argv[])
{
	DWORD processId;
	std::wcout << "Enter the target process Id: ";
	std::cin >> processId;

	DWORD freqOffset = 0;
	std::cout << "Enter a frequency offset in hertz (e.g. 800): ";
	std::cin >> freqOffset;

	WCHAR* dllToInject = L"..\\Debug\\BeepHook.dll";
	wprintf(L"Attempting to inject: %s\n\n", dllToInject);

	// Inject dllToInject into the target process Id, passing 
	// freqOffset as the pass through data.
	NTSTATUS nt = RhInjectLibrary(
		processId,   // The process to inject into
		0,           // ThreadId to wake up upon injection
		EASYHOOK_INJECT_DEFAULT,
		dllToInject, // 32-bit
		NULL,		 // 64-bit not provided
		&freqOffset, // data to send to injected DLL entry point
		sizeof(DWORD)// size of data to send
	);

	if (nt != 0)
	{
		printf("RhInjectLibrary failed with error code = %d\n", nt);
		PWCHAR err = RtlGetLastErrorString();
		std::wcout << err << "\n";
	}
	else 
	{
		std::wcout << L"Library injected successfully.\n";
	}

	std::wcout << "Press Enter to exit";
	std::wstring input;
	std::getline(std::wcin, input);
	std::getline(std::wcin, input);
	return 0;
}

#include <easyhook.h>
#include <string>
#include <iostream>
#include <Windows.h>

DWORD gFreqOffset = 0;
BOOL WINAPI myBeepHook(DWORD dwFreq, DWORD dwDuration)
{
	std::cout << "\n    BeepHook: ****All your beeps belong to us!\n\n";
	return Beep(dwFreq + gFreqOffset, dwDuration);
}

// EasyHook will be looking for this export to support DLL injection. If not found then 
// DLL injection will fail.
extern "C" void __declspec(dllexport) __stdcall NativeInjectionEntryPoint(REMOTE_ENTRY_INFO* inRemoteInfo);

void __stdcall NativeInjectionEntryPoint(REMOTE_ENTRY_INFO* inRemoteInfo)
{
	std::cout << "\n\nNativeInjectionEntryPointt(REMOTE_ENTRY_INFO* inRemoteInfo)\n\n" <<
		"IIIII           jjj               tt                dd !!! \n"
		" III  nn nnn          eee    cccc tt      eee       dd !!! \n"
		" III  nnn  nn   jjj ee   e cc     tttt  ee   e  dddddd !!! \n"
		" III  nn   nn   jjj eeeee  cc     tt    eeeee  dd   dd     \n"
		"IIIII nn   nn   jjj  eeeee  ccccc  tttt  eeeee  dddddd !!! \n"
		"              jjjj                                         \n\n";

	std::cout << "Injected by process Id: " << inRemoteInfo->HostPID << "\n";
	std::cout << "Passed in data size: " << inRemoteInfo->UserDataSize << "\n";
	if (inRemoteInfo->UserDataSize == sizeof(DWORD))
	{
		gFreqOffset = *reinterpret_cast<DWORD *>(inRemoteInfo->UserData);
		std::cout << "Adjusting Beep frequency by: " << gFreqOffset << "\n";
	}

	// Perform hooking
	HOOK_TRACE_INFO hHook = { NULL }; // keep track of our hook

	std::cout << "\n";
	std::cout << "Win32 Beep found at address: " << GetProcAddress(GetModuleHandle(TEXT("kernel32")), "Beep") << "\n";

	// Install the hook
	NTSTATUS result = LhInstallHook(
		GetProcAddress(GetModuleHandle(TEXT("kernel32")), "Beep"),
		myBeepHook,
		NULL,
		&hHook);
	if (FAILED(result))
	{
		std::wstring s(RtlGetLastErrorString());
		std::wcout << "Failed to install hook: ";
		std::wcout << s;
	}
	else 
	{
		std::cout << "Hook 'myBeepHook installed successfully.";
	}

	// If the threadId in the ACL is set to 0,
	// then internally EasyHook uses GetCurrentThreadId()
	ULONG ACLEntries[1] = { 0 };

	// Disable the hook for the provided threadIds, enable for all others
	LhSetExclusiveACL(ACLEntries, 1, &hHook);

	return;
}

typedef int(__fastcall * TYPE_RequestPtr)(void* pthis,void*edx, int id,char * inBuf,int inLen,char * outBuf,int & outLen,int a1,int a2,int a3);

TYPE_RequestPtr pOldRequest;

int   __fastcall HookRequest(void* pthis,void*edx, int id, char * inBuf, int inLen, char * outBuf, int & outLen, int a1, int a2, int a3)
{
	int ret;
	std::cout << "HookRequest:--------------------------" << pthis << ",id=" << id<<",a1="<<a1<<",a2="<<a2<<",a3="<<a3 << std::endl;
	std::cout << "inLen=" << inLen << ",outLen=" << outLen << std::endl;
	std::cout<<"inbuf=" << (void*)inBuf << ",outbuf=" << (void*)outBuf << std::endl;
	if (inBuf != NULL) {
		std::cout << Hexdump(inBuf, inLen) << std::endl;
	}
	else {
		std::cout << "inBuf is null" << std::endl;	
	}
	ret= pOldRequest(pthis,edx, id, inBuf, inLen, outBuf, outLen, a1, a2, a3);
	std::cout << "outLen=" << outLen <<",ret="<<ret<< std::endl;
	//TestA ta;
	//ta.Request(id, inBuf, inLen, outBuf, outLen, a1, a2, a3);
	//testf(pthis, id, inBuf, inLen, outBuf, outLen, a1, a2, a3);
	if (outBuf != NULL) {
		std::cout << "outBuf: outL" << std::endl;
		std::cout << Hexdump(outBuf, outLen) << std::endl;
	}
	else {
		std::cout << "outBuf is null" << std::endl;
	}
	return ret;
}


pOldRequest =(TYPE_RequestPtr) GetProcAddress(GetModuleHandle(TEXT("FLRPCLib")), "?Request@CFLRPCApi@@QAEHHPADH0AAHHHH@Z");
// Install the hook request
	 result = LhInstallHook(
		pOldRequest,
		HookRequest,
		NULL,
		&hHook2);