#include "windows.h"
#include "stdlib.h"

int main(void){
    STARTUPINFO startinfo;
    PROCESS_INFORMATION pi;
    DEBUG_EVENT DBEvent;
    CONTEXT context;
    CONTEXT context1;

    LPCTSTR filepath    = "..\\win7.exe";
    char ExitProc[]     = "Original process has been closed. Terminating.";
    char AppName[]      = "ImageBase";
    char AppName1[]     = "FS";
    char Key_content[]  = "KEY";
    char error_open[]   = "Create Process failed";
    char stroka[20]     = { 0 };
    char our_key[4]     = { 0 };
    char bufer          = 0x02;
    char byte_c         = 0x00;
    char int3           = 0xCC;
    char kol            = 0;

    /**< PLACING ALL THE PROC STARTUP INFO INTO STARTINFO */
    GetStartupInfo( &startinfo );


    /**< CREATING A PROC AND CHECKING IF FAILED */
    if(!CreateProcess(filepath, NULL, NULL, NULL,
                    0, DEBUG_PROCESS + DEBUG_ONLY_THIS_PROCESS,
                    NULL, NULL, &startinfo, &pi)){

        MessageBoxA( 0, error_open, AppName, MB_OK );
        return 1;
    }

    while(1){
        /**< CATCHING DEBUG EVENTS */
        WaitForDebugEvent(&DBEvent, INFINITE);

        switch( DBEvent.dwDebugEventCode ){
            /**< HANDLING PROC EXIT */
            case EXIT_PROCESS_DEBUG_EVENT:
                MessageBoxA(0, ExitProc, AppName, MB_OK);
                ExitProcess(0);
                break;

            case CREATE_PROCESS_DEBUG_EVENT:
                /**< IMAGEBASE INTO DIALOG */
                itoa((int)DBEvent.u.CreateProcessInfo.lpBaseOfImage, stroka, 16);
                MessageBoxA( 0, stroka, AppName, MB_OK );

                /**< CHANGING A RASHET BUTTON */
                ReadProcessMemory( DBEvent.u.CreateProcessInfo.hProcess,(LPVOID)0x040103A, &bufer, 1, NULL );
                if(bufer==3){
                    bufer=5;
                    WriteProcessMemory( DBEvent.u.CreateProcessInfo.hProcess,(LPVOID)0x040103A, &bufer, 1, NULL );
                }

                /**< PLACING A BREAKPOINT */
                /*ReadProcessMemory( DBEvent.u.CreateProcessInfo.hProcess, (LPVOID)0x040110C, &byte_c, 1, NULL );
                WriteProcessMemory( DBEvent.u.CreateProcessInfo.hProcess, (LPVOID)0x040110C, &int3, 1, NULL );*/
                ReadProcessMemory( DBEvent.u.CreateProcessInfo.hProcess, (LPVOID)0x040110C, &byte_c, 1, NULL );
                WriteProcessMemory( DBEvent.u.CreateProcessInfo.hProcess, (LPVOID)0x040110C, &int3, 1, NULL );
                break;

            case EXCEPTION_DEBUG_EVENT:
                if (DBEvent.u.Exception.ExceptionRecord.ExceptionCode==EXCEPTION_BREAKPOINT) {
                    if( kol==0 ){

                        /**< CONTEX_CONTROL
                             regEbp dd ?
                             regEip dd ?
                             regCs dd ?
                             regFlag dd ?
                             regEsp dd ?
                             regSs dd ?
                        */
                        //context.ContextFlags = CONTEXT_CONTROL;

                        /**< CONTEX_SEGMENTS
                             regGs dd ?
                             regFs dd ?
                             regEs dd ?
                             regDs dd ?
                        */
                        context1.ContextFlags = CONTEXT_SEGMENTS;

                        /**< (2) regFS INTO DIALOG */
                        GetThreadContext(pi.hThread, &context1);
                        itoa((int)context1.SegFs, stroka, 16);
                        MessageBoxA(0, stroka, AppName1, MB_OK);

                        //WriteProcessMemory(pi.hProcess,(LPVOID)0x040110C, &byte_c, 1, NULL);
                        WriteProcessMemory(pi.hProcess,(LPVOID)0x040110C, &byte_c, 1, NULL);

                        /**< KEY INTO A DIALOG */
                        //ReadProcessMemory(pi.hProcess, (LPVOID)0x0403013, &our_key, 3, NULL);
                        ReadProcessMemory(pi.hProcess, (LPVOID)0x0403013, &our_key, 3, NULL);
                        itoa((int)our_key, stroka, 16);
                        MessageBoxA(0, our_key, Key_content, MB_OK);
                        //GetThreadContext(pi.hThread, &context);
                    }
                    /**< ITS AN EXCEPTION SO CONTINUE */
                    ContinueDebugEvent( DBEvent.dwProcessId,DBEvent.dwThreadId, DBG_CONTINUE);
                    continue;
                }
        }
        ContinueDebugEvent(DBEvent.dwProcessId, DBEvent.dwThreadId, DBG_EXCEPTION_NOT_HANDLED);
    }
    CloseHandle(pi.hProcess);
    CloseHandle(pi.hThread);
    ExitProcess(0);
    return 0;
}