별종 키보드 갈고리 DLL 자체 설치 갈고리

#pragma data_seg ()
            static HHOOK g_hKeyboardHook = NULL;
            static HINSTANCE g_hInst        = NULL;
#pragma data_seg ()
#pragma comment (linker, "/section:Shared, rws")

BOOL WINAPI DllMain(HINSTANCE hInstance, DWORD fdwReason, PVOID pvReserved) {
     switch(fdwReason){
       case DLL_PROCESS_ATTACH:
       g_hInst =      (HINSTANCE) hInstance; 
。。。。。

그리고 두 개의 출력 함수를 사용합니다: 하나는 갈고리를 설치하고 하나는 마운트를 해제합니다

MY_API BOOL HookKey ()
{
       ....
       g_hKeyboardHook     = ::SetWindowsHookEx(WH_KEYBOARD, KeyboardProc,     g_hInst,     NULL);
       ....
}

CreateRemoteThread는 설치 훅의 내보내기 함수를 호출합니다.
 

LRESULT CALLBACK KeyboardProc(int nCode, WPARAM wParam, LPARAM lParam)
{
BOOL bKeyUp = lParam & (1 << 31);//  ，           
if (bKeyUp && wParam == VK_HOME && nCode == HC_ACTION) {
  
//////////////////////    ////////////////////////////////////////////////////
  
   //AfxMessageBox("ok");

   if (myform == NULL) 
   {
    AFX_MANAGE_STATE(AfxGetStaticModuleState());
    CWnd *pCWnd = CWnd::GetForegroundWindow();
    myform = new CMyForm();
    myform->Create(IDD_MYFORM,pCWnd);
    myform->ShowWindow(SW_SHOW);
   }
   else
   {
    myform->ShowWindow(myform->IsWindowVisible() ? SW_HIDE : SW_SHOW);
   }


   //////////////////////////////////////////////////////////////////////////
}
return ::CallNextHookEx(g_hhook, nCode, wParam ,lParam);
}

extern "C" __declspec(dllexport) BOOL WINAPI InstallHook(HWND h)
{
if (g_hhook == NULL) {
   DWORD pmod;
   DWORD hThread = GetWindowThreadProcessId(h,&pmod);
   g_hhook = ::SetWindowsHookEx(WH_KEYBOARD, (HOOKPROC)KeyboardProc,theApp.m_hInstance,hThread);
   if (g_hhook != NULL)
    return TRUE;
}
return FALSE;
}

extern "C" __declspec(dllexport) BOOL WINAPI InstallHook(HWND h)
{
if (g_hhook == NULL) {
   DWORD pmod;
   DWORD hThread = GetWindowThreadProcessId(h,&pmod);
   g_hhook = ::SetWindowsHookEx(WH_KEYBOARD, (HOOKPROC)KeyboardProc,theApp.m_hInstance,hThread);
   if (g_hhook != NULL)
    return TRUE;
}
return FALSE;
}

 
 
 
 
 
 
전재 대상:https://www.cnblogs.com/rogee/archive/2011/02/01/1948720.html