Description: 一、前言
前一段时间发表了一篇文章 “Hook API 工具”,没有附带主程序的源代码,这几天翻出来代码加了些注释,现在补上。不过大家还是最好看看牛的书,书上讲解很详细。
二、对代码的简单说明
总共3个工程,1个主程序,1个HookDll, 1个例子Dll。主程序负责启动进程,并将 HookDll 注入。还有一些额外的功能,比如显示 Log, 例子Dll的信息,导出函数等,HookDll 在 DllMain 启动的时候根据配置钩住指定的 API 函数
三、这种方法的缺点
这种方法是在系统 API 函数起始代码 和 自定义代码之间切换。在多线程的环境下,如果正在切换的过程,其它线程调用这个函数,会出现异常,同时,如果已经切换回系统代码,其它线程对这个API 的调用将抓不到。解决方法就是不要切换,这点应该是可以做到的。
四、结束语
在例子Dll 中,模仿了 ws_32.dll 的输出函数,但是不全,而且 Log 信息也不足,感兴趣的朋友如果有比较全的版本别忘了发给我一份 :)
程序大家可以随意修改,保留那个林月如的 Icon 就行了 ^_^
-one, the preamble some time ago published an article entitled "Hook API tool," not incidental to the main program source code, which turned out a few days code plus some notes now fill. But we still look at the best cattle in the book, spoke on the very detailed. Two of the code simple instructions a total of three projects, a program, a HookDll, an example Dll. Main program to start the process and will HookDll injection. There are some additional features, such as Log shows examples Dll information derived function, in DllMain HookDll boot time configuration hooked designated API Function 3, the shortcomings of this method This method is the system API function code and starting from the definition of switching between code. In multithreaded environment, if the switching proces Platform: |
Size: 147036 |
Author:ddd |
Hits:
Description: MAPWIN, written by Richard Smith (president of Phar Lap
Software), is a program that makes it easy to see what API functions
a Windows program uses, or what functions a dynamic-link library
(DLL) or device driver provides. Phar Lap generally uses this
utility to determine what API functions need to be implemented in
order to run a program under its 286|DOS-Extender environment. You
can use it to snoop around inside Windows, and uncover useful
undocumented API functions.
Platform: |
Size: 7884 |
Author:zhoukuan |
Hits:
Description: 从所周知,NT环境中API的黑洞之一便是NTDLL.DLL,这个DLL包含了许多有用的函数,这些函数都是未公开的。此代码拟使用NTDLL.DLL中的NtQueryInformationProcess函数来获取任何指定进程之父进程的ID。-from known, NT environment API is one of the black hole NTDLL.DLL, the DLL contains many useful functions, these functions are not open to the public. This code to be used in NTDLL.DLL NtQueryInformationProcess function to obtain any specified process ID of the parent process. Platform: |
Size: 17983 |
Author:www |
Hits:
Description: 我做的安装程序,支持环境变量,快捷方式,注册dll等,里面的方法值得参阅-installation and support environment variables, shortcuts, registered dll, they should refer to the method Platform: |
Size: 17408 |
Author:杨焱炤 |
Hits:
Description: 从所周知,NT环境中API的黑洞之一便是NTDLL.DLL,这个DLL包含了许多有用的函数,这些函数都是未公开的。此代码拟使用NTDLL.DLL中的NtQueryInformationProcess函数来获取任何指定进程之父进程的ID。-from known, NT environment API is one of the black hole NTDLL.DLL, the DLL contains many useful functions, these functions are not open to the public. This code to be used in NTDLL.DLL NtQueryInformationProcess function to obtain any specified process ID of the parent process. Platform: |
Size: 17408 |
Author:www |
Hits:
Description: 一、前言
前一段时间发表了一篇文章 “Hook API 工具”,没有附带主程序的源代码,这几天翻出来代码加了些注释,现在补上。不过大家还是最好看看牛的书,书上讲解很详细。
二、对代码的简单说明
总共3个工程,1个主程序,1个HookDll, 1个例子Dll。主程序负责启动进程,并将 HookDll 注入。还有一些额外的功能,比如显示 Log, 例子Dll的信息,导出函数等,HookDll 在 DllMain 启动的时候根据配置钩住指定的 API 函数
三、这种方法的缺点
这种方法是在系统 API 函数起始代码 和 自定义代码之间切换。在多线程的环境下,如果正在切换的过程,其它线程调用这个函数,会出现异常,同时,如果已经切换回系统代码,其它线程对这个API 的调用将抓不到。解决方法就是不要切换,这点应该是可以做到的。
四、结束语
在例子Dll 中,模仿了 ws_32.dll 的输出函数,但是不全,而且 Log 信息也不足,感兴趣的朋友如果有比较全的版本别忘了发给我一份 :)
程序大家可以随意修改,保留那个林月如的 Icon 就行了 ^_^
-one, the preamble some time ago published an article entitled "Hook API tool," not incidental to the main program source code, which turned out a few days code plus some notes now fill. But we still look at the best cattle in the book, spoke on the very detailed. Two of the code simple instructions a total of three projects, a program, a HookDll, an example Dll. Main program to start the process and will HookDll injection. There are some additional features, such as Log shows examples Dll information derived function, in DllMain HookDll boot time configuration hooked designated API Function 3, the shortcomings of this method This method is the system API function code and starting from the definition of switching between code. In multithreaded environment, if the switching proces Platform: |
Size: 146432 |
Author:ddd |
Hits:
Description: MAPWIN, written by Richard Smith (president of Phar Lap
Software), is a program that makes it easy to see what API functions
a Windows program uses, or what functions a dynamic-link library
(DLL) or device driver provides. Phar Lap generally uses this
utility to determine what API functions need to be implemented in
order to run a program under its 286|DOS-Extender environment. You
can use it to snoop around inside Windows, and uncover useful
undocumented API functions.
Platform: |
Size: 7168 |
Author:zhoukuan |
Hits:
Description: 点量BT的开发目的是让用户无需关心和了解BT的具体实现细节,只需要写几十行甚至几行代码,便可以实现一个功能完善而且强大的BT应用软件。目前点量BT已经在多家客户的网吧游戏更新系统 / 教育视频BT下载系统中应用.
点量BT源码使用高效的c++代码编写,提供标准的动态链接库(DLL),可供C/C++、Delphi、C#、Java、VB等语言和各常用开发环境调用,让您完全像调用系统API一样的调用
-BT point volume was developed to allow users without concern for and understanding of BT specific implementation details, just to write dozens of lines and even a few lines of code, they can realize a fully functional and powerful application software BT. BT has been present at the volume of customers in the Internet cafe to update the game system/education video download BT System. Point the volume of efficient use of BT source c++ Coding, provides a standard dynamic-link library (DLL), available C/C++, Delphi, C#, Java, VB and other language and the common development environment called, allows you to completely the same as calling the system call API Platform: |
Size: 756736 |
Author: |
Hits:
Description: 开发环境vs2005,仅实现了用户注册(uc_user_register)、登录(uc_user_login)和密码修改(uc_user_edit) ,权当抛砖引玉之用
修正了urlencode导致中文用户名乱码问题-Development environment vs2005, only the realization of the user registration (uc_user_register), log (uc_user_login) and password modification (uc_user_edit), when the right to initiate amendments to the urlencode use led to the issue of Chinese user name garbled Platform: |
Size: 25600 |
Author:yueyee |
Hits:
Description: VC++动态链接库(DLL)编程,只要遵循约定的DLL接口规范和调用方式,用各种语言编写的DLL都可以相互调用。譬如Windows提供的系统DLL(其中包括了Windows的API),在任何开发环境中都能被调用,不在乎其是Visual Basic、Visual C++还是Delphi-VC++ dynamic link library (DLL) program, simply follow the convention of the DLL interface specification and the call mode, DLL written in various languages can call each other. For example, Windows provides a system DLL (which includes the Windows-API), in any development environment can be called, never mind its a Visual Basic, Visual C++ 还是 Delphi Platform: |
Size: 15173632 |
Author:陈萍 |
Hits:
Description: 高级XP界面程序PB源码,环境:PB9.0
说明:
方法
API 函数
function integer ClassXP(ulong hWnd, integer bEnable) library "ClassXP.dll"
调用
ClassXP(0,1)
将来版本支持皮肤-PB High XP interface program source, the environment: PB9.0 Description: Method API function function integer ClassXP (ulong hWnd, integer bEnable) library " ClassXP.dll" call ClassXP (0,1) to support future versions of the skin Platform: |
Size: 151552 |
Author:bouddha |
Hits:
Description: C# API函数查询工具
(需要.NET环境支持,无其他特殊要求)
主要功能:
简单快速对C#中使用的API函数进行查询,包括
-------------------------
1。提供在C#中能够直接运行的代码。
2。该函数的中文注释。
3。该函数所需要的DLL库名称。
4。函数与C#中函数的对应关系。
5。API常量查询(给出能够直接在C#中调用的代码)
6。显示对函数对操作系统的支持(WIN9X OR WIN2K)
--------------------------
贴心小功能
--------------------------
1。代码中关键字高亮显示,不同关键字显示不同颜色。
2。与C#中对应函数如果过长,则动态滚动显示。
3。动态下拉框提示,直接匹配最合适的函数
4。所有部分均有提示信息,功能效果一目了然
--------------------------
可选特殊功能
--------------------------
1。可手动修改函数及其相关信息。
2。可手动添加当前库中没有的API函数及其相关信息
-C# API function query tool
(Requires. NET environment to support, no other special requirements)
Main features:
Simple and fast on the C# API functions used in queries, including
-------------------------
1. Available in C#, the code can be run directly.
2. The function of the Chinese comments.
3. The function of the required DLL library name.
4. Function with C# in the function of the correspondence.
5. API constant query (given directly to call in the C# code)
6. Show the function of the operating system support (WIN9X OR WIN2K)
--------------------------
Intimate function
--------------------------
1. Code syntax highlighting different keywords displayed in different colors.
2. And the corresponding C# function if too long, the dynamic scroll.
3. Dynamic drop-down box to prompt, direct matching the most appropriate function
4. Some are reminders of all the functional results at a glance
--------------------------
Optiona Platform: |
Size: 338944 |
Author:钟毓秀 |
Hits:
Description: Engine is codenamed wg3dfx and works in an environment DirectX API, which means that it is adaptable to all versions of Windows (from version 2000 to Windows 7). Engine uses Truevision SDK 6.5, and to ensure the proper functioning of Truevision, you ll need to download the SDK 6.5 and MTV3D65.dll set as a reference. For audio support, wg3dfx used irrKlang and you will need to download and install the same. You can find more about it at woodgamesfx. Platform: |
Size: 188416 |
Author:yansong |
Hits:
Description: MT3 API dll for Delphi development environment. You can use it to develop your own platform for MT3. Platform: |
Size: 82944 |
Author:Todayke |
Hits:
Description: vb是Visual Basic的简称,是由美国微软公司于1991年开发的一种可视化的、面向对象和采用事件驱动方式的结构化高级程序设计语言,可用于开发 Windows 环境下的各类应用程序。它简单易学、效率高,且功能强大可以与 Windows 专业开发工具SDK相媲美。在Visual Basic环境下,利用事件驱动的编程机制、新颖易用的可视化设计工具,使用Windows内部的广泛应用程序接口(API)函数,动态链接库(DLL)、对象的链接与嵌入(OLE)、开放式数据连接(ODBC)等技术,可以高效、快速地开发Windows环境下功能强大、图形界面丰富的应用软件系统。-Vb is Visual Basic abbreviation, is from the Microsoft in 1991 and development of a visualization, object-oriented and adopting event-driven way of structured high-level programming language, can be used to develop Windows environment of all kinds of applications. It is easy to operate, high efficiency, and powerful professional development tools can with Windows SDK comparable. In the Visual Basic environment, use event-driven programming mechanism, novel easy-to-use visualization design tool, using Windows internal widely application program interface (API) function, DLL are stated, object links with embedded (OLE), open data connection (ODBC) technology, can efficiently and quickly develop Windows environment powerful functions, graphical interface rich application software system. Platform: |
Size: 24742912 |
Author:haha |
Hits:
Description: 使用 ACE 这个庞大的自适应通信环境并不是最佳的工程选择。这个例子以及其中的文档演示了如何使ACE与MFC和谐共处,解决因调用不当导致内存泄露、宽窄字符集接口等问题。
实现的例子使用ACE的Reactor 和 Task 实现了接收者-伴随处理模型,用消息队列实现了大数据包拼接,但要注意一个例程自发自收会发生阻塞, 这与使用API大不相同。ACE 太大了,很恼火。ACE 的 ACE_warppers.sln 使用VC2010进行了改变,添加了UnicodeDebug, UnicdoeRelease两个模式,对应多字节、Unicdoe的四种库命名为 ACE.dll, ACEd.dll, ACEu.dll, ACEud.d-Use of ACE Adaptive Communication Environment in this huge project is not the best choice. This example and the documentation which shows how ACE and MFC harmony to solve memory leak due to improper call, the interface width character set issues. Examples of implementation of the Reactor and the use of ACE Task implementation of the receiver- with processing model, with the message queue data packets to achieve a large mosaic, but note that since the resumption of a routine voluntary blocking occurs, which is very different from using the API. ACE is too large, very angry. ACE' s ACE_warppers.sln use VC2010 for a change, add UnicodeDebug, UnicdoeRelease two modes, corresponding to multi-byte, Unicdoe four library named ACE.dll, ACEd.dll, ACEu.dll, ACEud.dll Platform: |
Size: 12347392 |
Author:流浪小狗 |
Hits:
Description: 点量BT下载器的开发目的是让用户无需关心和了解BT的具体实现细节,只需要写几十行甚至几行代码,便可以实现一个功能完善而且强大的BT应用软件。目前点量P2P源代码已经在多家客户的游戏更新系统 / P2P VOD点播系统 / 视频更新 / 文件BT传输分发下载等系统中广泛应用。有众多正式客户资源,经历了广泛的测试,功能完善和成熟。
点量P2P源码使用高效的c++代码编写,提供标准的动态链接库(DLL),可供C/C++、Delphi、C#、Java、VB、Borland C++等语言和各常用开发环境调用,让您完全像调用系统API一样的调用。-The Dolit BT download development purposes so that users do not need to care about and understand the specific implementation details of the BT just need to write dozens of lines or even a few lines of code, we can achieve a full-featured and powerful BT applications. Point the amount of P2P source code has been widely used game update system of the number of customers/P2P VOD demand system/video updates/file BT transmission distribution download system. There are many formal customer resources, undergone extensive testing, functional perfection and maturity. Point the amount of P2P source the efficient c++ code written in standard dynamic link library (DLL), available for C/C++, Delphi, C#, Java, VB, Borland C++ other languages and commonly used development environment call exactly like call the system API call. Platform: |
Size: 3461120 |
Author:Lillian |
Hits:
Description: :介绍了GPIB设备通讯的特点和Agilent IO Libraries的Windows API函数,论述了
Agilent IO Libraries中有关Windows API通讯函数的调用方法和在Delphi环境实现调用
W indows DLL 的编程方法.,: GPIB devices communicate features and Agilent IO Libraries Windows API function, discusses the calls to the Windows API communication function and call the W indows DLL' s programming in the Delphi environment to achieve the Agilent IO Libraries. Platform: |
Size: 177152 |
Author:zfq |
Hits: