user Hook学习日志，文档备份

学习Hook时做的一个小东西，放在这里备份。

头文件.h

// 下列 ifdef 块是创建使从 DLL 导出更简单的
// 宏的标准方法。此 DLL 中的所有文件都是用命令行上定义的 USERX_EXPORTS
// 符号编译的。在使用此 DLL 的
// 任何其他项目上不应定义此符号。这样，源文件中包含此文件的任何其他项目都会将
// USERX_API 函数视为是从 DLL 导入的，而此 DLL 则将用此宏定义的
// 符号视为是被导出的。

#pragma  once
#ifdef SHELLHKLIBAPI
#define SHELLHKLIBAPI __declspec(dllexport)
#else
#define SHELLHKLIBAPI __declspec(dllimport)
#endif

#define  WM_CREATEWINDOW	WM_APP + 100//新建窗口时发送的消息
#define  WM_DESTROYWINDOW	WM_APP + 101//销毁窗口时发送的消息
#define  WM_REDAWWINDOW		WM_APP + 102 //窗口标题发生变化
 
extern "C" _declspec(dllexport)	
  BOOL WINAPI HookShell_Start (HWND hwnd);
extern "C" _declspec(dllexport)	
  BOOL WINAPI HookShell_Stop (); 


extern "C" _declspec(dllexport)	
BOOL WINAPI HookCBT_Stop();

extern "C" _declspec(dllexport)	
BOOL WINAPI HookCBT_Start ();

.cpp实现文件

// UserX.cpp : 定义 DLL 应用程序的导出函数。
//

#include "stdafx.h"
#include "UserX.h" 
//#include <map>

#pragma warning(disable: 4001) /* Single line comment */
 
 
HINSTANCE g_hinstDll = NULL; //  
 
#pragma comment(linker,"-section:Shared,rws") 
#pragma data_seg("Shared")

HHOOK g_hhook = NULL; // shell hook
HHOOK g_hCBT = NULL; //CBT hook
HWND g_hwndMain = NULL; // 主窗口
//HMap g_hwndMap;
#pragma data_seg() 



BOOL WINAPI DllMain (HINSTANCE hinstDll, DWORD fdwReason, LPVOID lpvReserved) {

	switch (fdwReason) {

	 case DLL_PROCESS_ATTACH:
		 g_hinstDll = hinstDll;
		 break;
	}
	return(TRUE);
}
//////////////////////////////////////////////////////////////////////////
// DLL入门函数
//////////////////////////////////////////////////////////////////////////

static LRESULT WINAPI HookShell_HookProc (int nCode,
					  WPARAM wParam, LPARAM lParam) {
 
  HWND hwnd = (HWND) wParam; 
  LRESULT lResult = CallNextHookEx(g_hhook, nCode, wParam, lParam);

  switch (nCode) {

	 case HSHELL_WINDOWCREATED:
		 {
		PostMessage(g_hwndMain,WM_CREATEWINDOW,wParam,lParam);
		 
		  }
		return(lResult);
	 case HSHELL_WINDOWDESTROYED:
		 PostMessage(g_hwndMain,WM_DESTROYWINDOW,wParam,lParam);
		return(lResult);
	 //case HSHELL_WINDOWACTIVATED:
	 case HSHELL_REDRAW:
		 PostMessage(g_hwndMain,WM_REDAWWINDOW,wParam,lParam);
		 return(lResult);
	 default:
		 return(lResult);
	}

return(lResult);
}

//////////////////////////////////////////////////////////////////////////
// WH_SHELL，新建顶层窗口
///// 

BOOL WINAPI HookShell_Start (HWND hwnd) { 
	HHOOK hhook = NULL;
	if (g_hhook != NULL)
		return(FALSE); 
	g_hwndMain = hwnd;
	Sleep(0);

	hhook = SetWindowsHookEx(WH_SHELL, HookShell_HookProc, g_hinstDll, 0);
	InterlockedExchange((PLONG) &g_hhook, (LONG) hhook);

	return(g_hhook != NULL);
}
 
BOOL WINAPI HookShell_Stop() {

	BOOL fOK = TRUE;
	if (g_hhook != NULL) {
		fOK = UnhookWindowsHookEx(g_hhook);
		g_hhook = NULL;
	}
	return(fOK);
}

 


//////////////////////////////////////////////////////////////////////////
// 

LRESULT CALLBACK CBT_Proc(int nCode,
			 WPARAM wParam,
			 LPARAM lParam
			 ) 
{
	//防止桌面窗口被激活
	if (nCode ==HCBT_ACTIVATE && (HWND)wParam ==g_hwndMain)
	{
		return 1;
	}
	return 0 ;
}

BOOL WINAPI HookCBT_Start () { 
	HHOOK hhook = NULL;
	if (g_hCBT != NULL)
		return(FALSE);   

	hhook = SetWindowsHookEx(WH_CBT, CBT_Proc, g_hinstDll, 0);
	InterlockedExchange((PLONG) &g_hCBT, (LONG) hhook);

	return(g_hCBT != NULL);
}


BOOL WINAPI HookCBT_Stop() {

	BOOL fOK = TRUE;
	if (g_hCBT != NULL) {
		fOK = UnhookWindowsHookEx(g_hCBT);
		g_hCBT = NULL;
	}
	return(fOK);
}

.def 函数导出文件

LIBRARY	"UserX" 
EXPORTS
HookShell_Start
HookShell_Stop
HookCBT_Stop	
HookCBT_Start