bump version to 1.0.2.0, add, fixed interception of excepcons (now propagate with DBG_EXCEPTION_NOT_HANDLED), fixed a performance issue when a process with an applied patch was being scanned again

README.md

@@ -1,4 +1,8 @@
 <div align="center">
+
+![logo](./assets/icon.svg)
+
+---
   <h1>WeMod Patcher</h1>
 </div>
 
@@ -15,11 +19,14 @@ With this patch you will be able to use the latest version together with Pro.
 ## 💫  What features will be available?
 
 ✅ Unlimited usage time <br/>
-✅ No ads <br/>
+✅ Disabling automatic updates (optional) <br/>
+✅ Automatic patching of new WeMod versions <br/>
 ✅ AI Game guides <br/>
 ✅ Saving mods <br/>
+✅ Exclusive to pro subscription customization for hacks <br/>
+✅ Hotkeys (hotkey functionality is broken after static patching for unknown reason) <br/>
 ❌ Connect phone <br/>
-❌ Hotkeys (hotkey functionality breaks after patch for unknown reason)
+
 
 ## 👀 How to use?
 
@@ -34,15 +41,28 @@ With this patch you will be able to use the latest version together with Pro.
 - I applied the patch but when I inject I get stuck on 'Loading mods...'.
   - Just close WeMod and try again
 - During the game, some hacks are enabled without my input
-  - This is a bug after the patch, you have to turn off hotkeys in WeMod settings
-- Why is the patch executable file size so large? It seems to me that you want to harm my system.
-  - The thing is that the application is written in Electron, so it also puts chromium, nodejs and some libraries in the exe. Maybe Electron is a temporary solution and in the future I will consider another option
+  - This is a bug after the static patch, you have to turn off hotkeys in WeMod settings
+- VirusTotal claims that this program is a malware/trojan.
+  - Perhaps the patcher does have the same signatures as malware (virtual memory patching). But this is a false positive, you can look at the source code or even build the patcher yourself.
+- Does this application transfer any data to the Internet from my computer?
+  - The short answer is NO. This application does not need access to the Internet. The most it does is download updates if you want it to.
+- What makes this application better than other patchers?
+  - All actions related to patches are performed on your computer. No files of unknown origin will be downloaded.
 
 ---
 
+## 🖼️ Screenshots
+![1](./assets/screenshots/app1.png)
+![2](./assets/screenshots/app2.png)
+---
+
 ## 📜 License
-This project is licensed under the Apache-2.0 - see the [LICENSE](LICENSE.txt) file for details.
+This project is licensed under the Apache-2.0 - see the [LICENSE](LICENSE.md) file for details.
 
 ---
 ## ❤️ Support
 [![ko-fi](https://www.ko-fi.com/img/githubbutton_sm.svg)](https://ko-fi.com/kitbyte)
+
+---
+
+[![Star History Chart](https://api.star-history.com/svg?repos=k1tbyte/Wemod-Patcher&type=Date)](https://www.star-history.com/#k1tbyte/Wemod-Patcher&Date)

WeModPatcher/Core/RuntimePatcher.cs

@@ -43,21 +43,39 @@ namespace WeModPatcher.Core
             }
             
             var debugEvent = new Imports.DEBUG_EVENT();
-            var processIds = new List<uint>();
-            while (Imports.WaitForDebugEvent(ref debugEvent, 1000))
+            var processIds = new Dictionary<uint, bool>();
+            while (Imports.WaitForDebugEvent(ref debugEvent, uint.MaxValue))
             {
+                uint continueStatus = Imports.DBG_CONTINUE;
                 var code = debugEvent.dwDebugEventCode;
+                //  Console.WriteLine("Debug event code: " + code);
                 if (code == Imports.CREATE_PROCESS_DEBUG_EVENT)
                 {
-                    processIds.Add(debugEvent.dwProcessId);
+                    // Console.WriteLine("Spawning process: " + debugEvent.dwProcessId);
+                    processIds.Add(debugEvent.dwProcessId, false);
+                }
+                else if (code == Imports.EXIT_PROCESS_DEBUG_EVENT)
+                {
+                    processIds.Remove(debugEvent.dwProcessId);
+                    
+                    if(processIds.Count == 0)
+                    {
+                        break;
+                    }
                 }
                 else if (code == Imports.EXCEPTION_DEBUG_EVENT)
                 {
-                    var exceptionInfo = Imports.MapUnmanagedStructure<Imports.EXCEPTION_DEBUG_INFO>(debugEvent.Union);
+                    // pass the exception to the process
+                    continueStatus = Imports.DBG_EXCEPTION_NOT_HANDLED;
                     
-                    if (exceptionInfo.ExceptionRecord.ExceptionCode == Imports.EXCEPTION_BREAKPOINT)
+                    var exceptionInfo = Imports.MapUnmanagedStructure<Imports.EXCEPTION_DEBUG_INFO>(debugEvent.Union);
+                    //  Console.WriteLine("Exception code: " + exceptionInfo.ExceptionRecord.ExceptionCode);
+                    
+                    if (exceptionInfo.ExceptionRecord.ExceptionCode == Imports.EXCEPTION_BREAKPOINT && 
+                        processIds.TryGetValue(debugEvent.dwProcessId, out var wasPatched) && !wasPatched)
                     {
                         var process = Process.GetProcessById((int)debugEvent.dwProcessId);
+                        //    Console.WriteLine("Scanning process: " + process.ProcessName + " " + process.Id);
                         var address = MemoryUtils.ScanVirtualMemory(
                             process.Handle,
                             process.Modules[0].BaseAddress, 
@@ -67,7 +85,7 @@ namespace WeModPatcher.Core
                         
                         if (address != IntPtr.Zero)
                         {
-                            MemoryUtils.SafeWriteVirtualMemory(
+                            processIds[debugEvent.dwProcessId] =  MemoryUtils.SafeWriteVirtualMemory(
                                 process.Handle, 
                                 address + Constants.ExePatchSignature.Offset,
                                 Constants.ExePatchSignature.PatchBytes
@@ -87,12 +105,12 @@ namespace WeModPatcher.Core
                     }
                 }
                 
-                Imports.ContinueDebugEvent(debugEvent.dwProcessId, debugEvent.dwThreadId, Imports.DBG_CONTINUE);
+                Imports.ContinueDebugEvent(debugEvent.dwProcessId, debugEvent.dwThreadId, continueStatus);
             }
 
-            foreach (var processId in processIds)
+            foreach (var entry in processIds)
             {
-                Imports.DebugActiveProcessStop(processId);
+                Imports.DebugActiveProcessStop(entry.Key);
             }
             
             Imports.CloseHandle(processInfo.hProcess);

WeModPatcher/Properties/AssemblyInfo.cs

@@ -51,5 +51,5 @@ using System.Windows;
 // You can specify all the values or you can default the Build and Revision Numbers
 // by using the '*' as shown below:
 // [assembly: AssemblyVersion("1.0.*")]
-[assembly: AssemblyVersion("1.0.0.0")]
-[assembly: AssemblyFileVersion("1.0.0.0")]
+[assembly: AssemblyVersion("1.0.2.0")]
+[assembly: AssemblyFileVersion("1.0.2.0")]

WeModPatcher/Utils/Win32/Imports.cs

@@ -247,10 +247,12 @@ namespace WeModPatcher.Utils.Win32
         public const uint DEBUG_PROCESS = 0x00000001;
         public const uint DBG_CONTINUE = 0x00010002;
         public const uint CREATE_PROCESS_DEBUG_EVENT = 3;
+        public const uint EXIT_PROCESS_DEBUG_EVENT = 5;
         public const uint EXCEPTION_DEBUG_EVENT = 1;
         public const uint LOAD_DLL_DEBUG_EVENT = 6;
         public const uint OUTPUT_DEBUG_STRING_EVENT = 8;
         public const uint EXCEPTION_BREAKPOINT = 0x80000003;
+        public const uint DBG_EXCEPTION_NOT_HANDLED = 0x80010001;
 
         // Constants for VirtualProtectex
         public const uint PAGE_EXECUTE_READWRITE = 0x40;

assets/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0,0,256,256" width="170px" height="170px" fill-rule="nonzero"><g transform="translate(17.92,17.92) scale(0.86,0.86)"><g fill="#27272a" fill-rule="nonzero" stroke="none" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" stroke-dasharray="" stroke-dashoffset="0" font-family="none" font-weight="none" font-size="none" text-anchor="none" style="mix-blend-mode: normal"><path d="M53.5814,276.83721c-41.10026,0 -74.4186,-33.31834 -74.4186,-74.4186v-148.83721c0,-41.10026 33.31834,-74.4186 74.4186,-74.4186h148.83721c41.10026,0 74.4186,33.31834 74.4186,74.4186v148.83721c0,41.10026 -33.31834,74.4186 -74.4186,74.4186z" id="shape"></path></g><g fill="#ffffff" fill-rule="nonzero" stroke="none" stroke-width="1" stroke-linecap="butt" stroke-linejoin="miter" stroke-miterlimit="10" stroke-dasharray="" stroke-dashoffset="0" font-family="none" font-weight="none" font-size="none" text-anchor="none" style="mix-blend-mode: normal"><g transform="scale(5.12,5.12)"><path d="M47.845,22.185l-20.03,-20.03c-1.543,-1.543 -4.046,-1.553 -5.729,0.002l-19.931,20.028c-1.542,1.542 -1.554,4.045 0,5.727l19.934,19.934c0.772,0.772 1.785,1.16 2.816,1.16c1.026,0 2.07,-0.385 2.91,-1.16l19.933,-19.934c1.605,-1.605 1.648,-4.175 0.097,-5.727zM18,27c-1.105,0 -2,-0.895 -2,-2c0,-1.105 0.895,-2 2,-2c1.105,0 2,0.895 2,2c0,1.105 -0.895,2 -2,2zM25,34c-1.105,0 -2,-0.895 -2,-2c0,-1.105 0.895,-2 2,-2c1.105,0 2,0.895 2,2c0,1.105 -0.895,2 -2,2zM25,20c-1.105,0 -2,-0.895 -2,-2c0,-1.105 0.895,-2 2,-2c1.105,0 2,0.895 2,2c0,1.105 -0.895,2 -2,2zM32,27c-1.105,0 -2,-0.895 -2,-2c0,-1.105 0.895,-2 2,-2c1.105,0 2,0.895 2,2c0,1.105 -0.895,2 -2,2z"></path></g></g></g></svg>