用C++ Builder 5.0编HOOK程序
http://tech.ddvip.com 2006年03月31日 社区交流
本文详细介绍用C++ Builder 5.0编HOOK程序
可见C++BUILDER4.0与DELPHI已能提供直接实现DLL内存段共享问题,请高手邦忙一起
试一试:在BCB或DELPHI具体应怎样做?
四
// 下面的程序将产生有三个导出函数的MouseHook.DLL
#include <windows.h>
#pragma argsused
typedef // 为共享区定义结构
struct
{
POINT MouseLoc; // 存放鼠标位置
HHOOK NewHook; // 存放新钩子句柄
int LoadCount; // DLL装入次数计数
} TShareMem;
TShareMem *ShareMem=NULL;
HINSTANCE DllHinst;
int WINAPI DllEntryPoint(HINSTANCE hinst, unsigned long reason, void* lpReserved)
{
DllHinst=hinst;
static HANDLE fh; // DLL共享区句柄
if (reason==DLL_PROCESS_ATTACH) // DLL入口
{ // 为共享区申请共享单元
fh=CreateFileMapping((HANDLE)-1,0,
PAGE_READWRITE,0,
sizeof(TShareMem),
"ShareForMouseHook");
ShareMem=(TShareMem *)MapViewOfFile(fh,
FILE_MAP_ALL_ACCESS,
0,0,0);
if (GetLastError()!=ERROR_ALREADY_EXISTS)
ZeroMemory(ShareMem,sizeof(TShareMem));
// 共享区初始化
ShareMem->LoadCount+=1; // 装入计数
}
if (reason==DLL_PROCESS_DETACH) // DLL出口处理
{
ShareMem->LoadCount-=1;
CloseHandle(fh);
}
return 1;
}
extern "C" __declspec(dllexport)
void GetMouse(int &mx,int &my,int &loadcount) // DLL导出函数GetMouse()
{
if (ShareMem!=NULL)
{
mx=ShareMem->MouseLoc.x;
my=ShareMem->MouseLoc.y;
loadcount=ShareMem->LoadCount;
}
}
LRESULT CALLBACK MouseHook(int nCode,
WPARAM wParam,LPARAM lParam)
{
if (nCode==HC_ACTION)
{
MOUSEHOOKSTRUCT *l=(MOUSEHOOKSTRUCT *)lParam;
ShareMem->MouseLoc=l->pt; //送鼠标位置
}
return(CallNextHookEx(ShareMem->NewHook,nCode,wParam,lParam));
}
extern "C" __declspec(dllexport)
void EnableHook() // 导出函数EnableHook()
{
if (ShareMem!=NULL)
if (ShareMem->NewHook==NULL) // 安装新钩子
ShareMem->NewHook=SetWindowsHookEx(WH_MOUSE,
(HOOKPROC)MouseHook,
DllHinst,0);
}
extern "C" __declspec(dllexport)
void DisableHook() // 导出函数DisableHook()
{
if (ShareMem!=NULL)
if (ShareMem->NewHook!=NULL)
{
UnhookWindowsHookEx(ShareMem->NewHook);
ShareMem->NewHook=NULL; // 卸掉新钩子
}
}
//=======================================================================
#include <vcl.h>
#pragma hdrstop
#include "CallUnit1.h"
#pragma package(smart_init)
#pragma resource "*.dfm"
TForm1 *Form1;
//---------------------------------------------------------------------------
__fastcall TForm1::TForm1(TComponent* Owner)
: TForm(Owner)
{
}
//---------------------------------------------------------------------------
extern "C" __declspec(dllimport)
void EnableHook(); // DLL导入函数1
extern "C" __declspec(dllimport)
void DisableHook(); // DLL导入函数2
extern "C" __declspec(dllimport)
void GetMouse(int &mx,int &my,int &loadcount); // DLL导入函数3
void __fastcall TForm1::Button1Click(TObject *Sender)
{
EnableHook();
int x,y,loadcount;
while (!Application->Terminated)
{ // 不停在从DLL中取回鼠标位置
GetMouse(x,y,loadcount);
Edit1->Text=String(x)+","+String(y)+":"+String(loadcount);
Application->ProcessMessages();
}
}
void __fastcall TForm1::Button2Click(TObject *Sender)
{
DisableHook();
}
void __fastcall TForm1::FormClose(TObject *Sender, TCloseAction &Action)
{
DisableHook();
}
//---------------------------------------------------------------------------
责编:豆豆技术应用