mirror of
https://github.com/mirror/processhacker
synced 2026-06-08 16:03:24 +00:00
7772e7c838
* removed PH_FULL_STRING git-svn-id: svn://svn.code.sf.net/p/processhacker/code@4673 21ef857c-d57f-4fe0-8362-d861dc6d29cd
305 lines
11 KiB
C
305 lines
11 KiB
C
/*
|
|
* Process Hacker -
|
|
* command line action mode
|
|
*
|
|
* Copyright (C) 2010-2011 wj32
|
|
*
|
|
* This file is part of Process Hacker.
|
|
*
|
|
* Process Hacker is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Process Hacker is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Process Hacker. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <phapp.h>
|
|
|
|
static HWND CommandModeWindowHandle;
|
|
|
|
#define PH_COMMAND_OPTION_HWND 1
|
|
|
|
BOOLEAN NTAPI PhpCommandModeOptionCallback(
|
|
__in_opt PPH_COMMAND_LINE_OPTION Option,
|
|
__in_opt PPH_STRING Value,
|
|
__in_opt PVOID Context
|
|
)
|
|
{
|
|
ULONG64 integer;
|
|
|
|
if (Option)
|
|
{
|
|
switch (Option->Id)
|
|
{
|
|
case PH_COMMAND_OPTION_HWND:
|
|
if (PhStringToInteger64(&Value->sr, 10, &integer))
|
|
CommandModeWindowHandle = (HWND)integer;
|
|
break;
|
|
}
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
NTSTATUS PhCommandModeStart(
|
|
VOID
|
|
)
|
|
{
|
|
static PH_COMMAND_LINE_OPTION options[] =
|
|
{
|
|
{ PH_COMMAND_OPTION_HWND, L"hwnd", MandatoryArgumentType }
|
|
};
|
|
NTSTATUS status = STATUS_SUCCESS;
|
|
PH_STRINGREF commandLine;
|
|
|
|
PhUnicodeStringToStringRef(&NtCurrentPeb()->ProcessParameters->CommandLine, &commandLine);
|
|
|
|
PhParseCommandLine(
|
|
&commandLine,
|
|
options,
|
|
sizeof(options) / sizeof(PH_COMMAND_LINE_OPTION),
|
|
PH_COMMAND_LINE_IGNORE_UNKNOWN_OPTIONS,
|
|
PhpCommandModeOptionCallback,
|
|
NULL
|
|
);
|
|
|
|
if (PhEqualString2(PhStartupParameters.CommandType, L"process", TRUE))
|
|
{
|
|
ULONG64 processId64;
|
|
HANDLE processId;
|
|
HANDLE processHandle;
|
|
|
|
if (!PhStartupParameters.CommandObject)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
if (!PhStringToInteger64(&PhStartupParameters.CommandObject->sr, 10, &processId64))
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
processId = (HANDLE)processId64;
|
|
|
|
if (PhEqualString2(PhStartupParameters.CommandAction, L"terminate", TRUE))
|
|
{
|
|
if (NT_SUCCESS(status = PhOpenProcess(&processHandle, PROCESS_TERMINATE, processId)))
|
|
{
|
|
status = PhTerminateProcess(processHandle, STATUS_SUCCESS);
|
|
NtClose(processHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"suspend", TRUE))
|
|
{
|
|
if (NT_SUCCESS(status = PhOpenProcess(&processHandle, PROCESS_SUSPEND_RESUME, processId)))
|
|
{
|
|
status = PhSuspendProcess(processHandle);
|
|
NtClose(processHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"resume", TRUE))
|
|
{
|
|
if (NT_SUCCESS(status = PhOpenProcess(&processHandle, PROCESS_SUSPEND_RESUME, processId)))
|
|
{
|
|
status = PhResumeProcess(processHandle);
|
|
NtClose(processHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"priority", TRUE))
|
|
{
|
|
UCHAR priority;
|
|
|
|
if (!PhStartupParameters.CommandValue)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
if (PhEqualString2(PhStartupParameters.CommandValue, L"idle", TRUE))
|
|
priority = PROCESS_PRIORITY_CLASS_IDLE;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"normal", TRUE))
|
|
priority = PROCESS_PRIORITY_CLASS_NORMAL;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"high", TRUE))
|
|
priority = PROCESS_PRIORITY_CLASS_HIGH;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"realtime", TRUE))
|
|
priority = PROCESS_PRIORITY_CLASS_REALTIME;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"abovenormal", TRUE))
|
|
priority = PROCESS_PRIORITY_CLASS_ABOVE_NORMAL;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"belownormal", TRUE))
|
|
priority = PROCESS_PRIORITY_CLASS_BELOW_NORMAL;
|
|
else
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
if (NT_SUCCESS(status = PhOpenProcess(&processHandle, PROCESS_SET_INFORMATION, processId)))
|
|
{
|
|
PROCESS_PRIORITY_CLASS priorityClass;
|
|
priorityClass.Foreground = FALSE;
|
|
priorityClass.PriorityClass = priority;
|
|
status = NtSetInformationProcess(processHandle, ProcessPriorityClass, &priorityClass, sizeof(PROCESS_PRIORITY_CLASS));
|
|
NtClose(processHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"iopriority", TRUE))
|
|
{
|
|
ULONG ioPriority;
|
|
|
|
if (!PhStartupParameters.CommandValue)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
if (PhEqualString2(PhStartupParameters.CommandValue, L"verylow", TRUE))
|
|
ioPriority = 0;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"low", TRUE))
|
|
ioPriority = 1;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"normal", TRUE))
|
|
ioPriority = 2;
|
|
else if (PhEqualString2(PhStartupParameters.CommandValue, L"high", TRUE))
|
|
ioPriority = 3;
|
|
else
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
if (NT_SUCCESS(status = PhOpenProcess(&processHandle, PROCESS_SET_INFORMATION, processId)))
|
|
{
|
|
status = PhSetProcessIoPriority(processHandle, ioPriority);
|
|
NtClose(processHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"pagepriority", TRUE))
|
|
{
|
|
ULONG64 pagePriority64;
|
|
ULONG pagePriority;
|
|
|
|
if (!PhStartupParameters.CommandValue)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
PhStringToInteger64(&PhStartupParameters.CommandValue->sr, 10, &pagePriority64);
|
|
pagePriority = (ULONG)pagePriority64;
|
|
|
|
if (NT_SUCCESS(status = PhOpenProcess(&processHandle, PROCESS_SET_INFORMATION, processId)))
|
|
{
|
|
status = NtSetInformationProcess(
|
|
processHandle,
|
|
ProcessPagePriority,
|
|
&pagePriority,
|
|
sizeof(ULONG)
|
|
);
|
|
NtClose(processHandle);
|
|
}
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandType, L"service", TRUE))
|
|
{
|
|
SC_HANDLE serviceHandle;
|
|
SERVICE_STATUS serviceStatus;
|
|
|
|
if (!PhStartupParameters.CommandObject)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
if (PhEqualString2(PhStartupParameters.CommandAction, L"start", TRUE))
|
|
{
|
|
if (!(serviceHandle = PhOpenService(
|
|
PhStartupParameters.CommandObject->Buffer,
|
|
SERVICE_START
|
|
)))
|
|
return PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
if (!StartService(serviceHandle, 0, NULL))
|
|
status = PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
CloseServiceHandle(serviceHandle);
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"continue", TRUE))
|
|
{
|
|
if (!(serviceHandle = PhOpenService(
|
|
PhStartupParameters.CommandObject->Buffer,
|
|
SERVICE_PAUSE_CONTINUE
|
|
)))
|
|
return PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
if (!ControlService(serviceHandle, SERVICE_CONTROL_CONTINUE, &serviceStatus))
|
|
status = PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
CloseServiceHandle(serviceHandle);
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"pause", TRUE))
|
|
{
|
|
if (!(serviceHandle = PhOpenService(
|
|
PhStartupParameters.CommandObject->Buffer,
|
|
SERVICE_PAUSE_CONTINUE
|
|
)))
|
|
return PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
if (!ControlService(serviceHandle, SERVICE_CONTROL_PAUSE, &serviceStatus))
|
|
status = PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
CloseServiceHandle(serviceHandle);
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"stop", TRUE))
|
|
{
|
|
if (!(serviceHandle = PhOpenService(
|
|
PhStartupParameters.CommandObject->Buffer,
|
|
SERVICE_STOP
|
|
)))
|
|
return PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
if (!ControlService(serviceHandle, SERVICE_CONTROL_STOP, &serviceStatus))
|
|
status = PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
CloseServiceHandle(serviceHandle);
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"delete", TRUE))
|
|
{
|
|
if (!(serviceHandle = PhOpenService(
|
|
PhStartupParameters.CommandObject->Buffer,
|
|
DELETE
|
|
)))
|
|
return PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
if (!DeleteService(serviceHandle))
|
|
status = PhGetLastWin32ErrorAsNtStatus();
|
|
|
|
CloseServiceHandle(serviceHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandType, L"thread", TRUE))
|
|
{
|
|
ULONG64 threadId64;
|
|
HANDLE threadId;
|
|
HANDLE threadHandle;
|
|
|
|
if (!PhStartupParameters.CommandObject)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
if (!PhStringToInteger64(&PhStartupParameters.CommandObject->sr, 10, &threadId64))
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
threadId = (HANDLE)threadId64;
|
|
|
|
if (PhEqualString2(PhStartupParameters.CommandAction, L"terminate", TRUE))
|
|
{
|
|
if (NT_SUCCESS(status = PhOpenThread(&threadHandle, THREAD_TERMINATE, threadId)))
|
|
{
|
|
status = PhTerminateThread(threadHandle, STATUS_SUCCESS);
|
|
NtClose(threadHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"suspend", TRUE))
|
|
{
|
|
if (NT_SUCCESS(status = PhOpenThread(&threadHandle, THREAD_SUSPEND_RESUME, threadId)))
|
|
{
|
|
status = PhSuspendThread(threadHandle, NULL);
|
|
NtClose(threadHandle);
|
|
}
|
|
}
|
|
else if (PhEqualString2(PhStartupParameters.CommandAction, L"resume", TRUE))
|
|
{
|
|
if (NT_SUCCESS(status = PhOpenThread(&threadHandle, THREAD_SUSPEND_RESUME, threadId)))
|
|
{
|
|
status = PhResumeThread(threadHandle, NULL);
|
|
NtClose(threadHandle);
|
|
}
|
|
}
|
|
}
|
|
|
|
return status;
|
|
}
|