开通博客赚积分
发布资源赚积分
分类

源码开发语言/平台
当前位置：首页 > 源码/资料 > Windows编程 > 钩子与API截获 > 查看源码
INJLIB.CPP
资源名称：HookAPI　[点击查看]
上传用户：nbcables
上传日期：2007-01-11
资源大小：1243k
文件大小：4k
源码类别：

钩子与API截获

开发平台：

Visual C++

INJLIB.CPP：源码内容
  1. #include <windows.h>
  2. #include <stdio.h>
  3. #include "ProcessModule.h"
  4. #include "util.h"
  6. #ifdef WINNT
  8. int WINAPI InjectLib(DWORD process_id, char *lib_name)
  9. {
  10. PTHREAD_START_ROUTINE pfnRemote =(PTHREAD_START_ROUTINE)
  11. GetProcAddress(GetModuleHandle("Kernel32"), "LoadLibraryA");
  12. if(pfnRemote ==NULL)
  13. return -1;
  14. HANDLE hProcess =OpenProcess(PROCESS_ALL_ACCESS, FALSE, process_id);
  15. if(hProcess ==NULL)
  16. {
  17. WriteLog("InjectLib:OpenProcess %d failed!", process_id);
  18. return -1;
  19. }
  21. int mem_size =strlen(lib_name)+1;
  22. void *premote_mem =VirtualAllocEx(hProcess, NULL, mem_size, MEM_COMMIT, PAGE_READWRITE);
  23. if(premote_mem ==NULL)
  24. {
  25. CloseHandle(hProcess);
  26. return -1;
  27. }
  29. //if(hThread) SuspendThread(hThread);
  31. int ret =WriteProcessMemory(hProcess, premote_mem, lib_name, mem_size,NULL);
  32. if(ret ==STATUS_ACCESS_VIOLATION || ret ==false)
  33. {
  34. //if(hThread) ResumeThread(hThread);
  35. VirtualFreeEx(hProcess, premote_mem, 0, MEM_RELEASE);
  36. CloseHandle(hProcess); 
  37. return -1;
  38. }
  39. //if(hThread) ResumeThread(hThread);
  41. HANDLE hThread =CreateRemoteThread(hProcess, NULL, 0, 
  42. pfnRemote, premote_mem, 0, NULL);
  44. if(hThread ==NULL)
  45. {
  46. VirtualFreeEx(hProcess, premote_mem, 0, MEM_RELEASE);
  47. CloseHandle(hProcess);
  48. return -1;
  49. }
  51. //WriteLog2("c:\hookapi_debug.log", "CreateRemoteThread ok");
  53. WaitForSingleObject(hThread, INFINITE);
  55. VirtualFreeEx(hProcess, premote_mem, 0, MEM_RELEASE);
  56. CloseHandle(hProcess);
  57. CloseHandle(hThread);
  59. return 0;
  60. }
  62. int WINAPI InjectLib(HANDLE hProcess, char *lib_name)
  63. {
  64. PTHREAD_START_ROUTINE pfnRemote =(PTHREAD_START_ROUTINE)
  65. GetProcAddress(GetModuleHandle("Kernel32"), "LoadLibraryA");
  66. if(pfnRemote ==NULL)
  67. return -1;
  69. if(hProcess ==NULL)
  70. {
  71. WriteLog("InjectLib:OpenProcess %d failed!", hProcess);
  72. return -1;
  73. }
  75. int mem_size =strlen(lib_name)+1;
  76. void *premote_mem =VirtualAllocEx(hProcess, NULL, mem_size, MEM_COMMIT, PAGE_READWRITE);
  77. if(premote_mem ==NULL)
  78. {
  79. CloseHandle(hProcess);
  80. return -1;
  81. }
  83. //if(hThread) SuspendThread(hThread);
  85. int ret =WriteProcessMemory(hProcess, premote_mem, lib_name, mem_size,NULL);
  86. if(ret ==STATUS_ACCESS_VIOLATION || ret ==false)
  87. {
  88. //if(hThread) ResumeThread(hThread);
  89. VirtualFreeEx(hProcess, premote_mem, 0, MEM_RELEASE);
  90. return -1;
  91. }
  92. //if(hThread) ResumeThread(hThread);
  94. HANDLE hThread =CreateRemoteThread(hProcess, NULL, 0, 
  95. pfnRemote, premote_mem, 0, NULL);
  97. if(hThread ==NULL)
  98. {
  99. VirtualFreeEx(hProcess, premote_mem, 0, MEM_RELEASE);
  100. return -1;
  101. }
  103. //WriteLog2("c:\hookapi_debug.log", "CreateRemoteThread ok");
  105. WaitForSingleObject(hThread, INFINITE);
  107. VirtualFreeEx(hProcess, premote_mem, 0, MEM_RELEASE);
  108. CloseHandle(hThread);
  110. return 0;
  111. }
  113. int WINAPI EjectLib(DWORD process_id, char *lib_name)
  114. {
  115. PTHREAD_START_ROUTINE pfnRemote =(PTHREAD_START_ROUTINE)
  116. GetProcAddress(GetModuleHandle("Kernel32"), "FreeLibrary");
  118. if(pfnRemote ==NULL)
  119. {
  120. WriteLog("EjectLib:GetProcAddress FreeLibrary failed!");
  121. return -1;
  122. }
  123. HANDLE hProcess =OpenProcess(PROCESS_ALL_ACCESS, FALSE, process_id);
  124. if(hProcess ==NULL)
  125. {
  126. WriteLog("EjectLib:OpenProcess %d failed!", process_id);
  127. return -1;
  128. }
  130. CProcessModule pm;
  131. HANDLE hmod =pm.GetProcessModuleHandle(process_id, lib_name);
  132. if(hmod ==NULL)
  133. {
  134. CloseHandle(hProcess);
  135. //WriteLog("EjectLib(), not found lib:%s", lib_name);
  136. return 0;
  137. }
  138. //WriteLog("EjectLib(), found lib:%s, mod handle:0x%x", lib_name, hmod);
  140. HANDLE hThread =CreateRemoteThread(hProcess, NULL, 0, 
  141. pfnRemote, hmod, 0, NULL);
  143. if(hThread ==NULL)
  144. {
  145. WriteLog("EjectLib():CreateRemoteThread failed! process_id:%d", process_id);
  146. CloseHandle(hProcess);
  147. return -1;
  148. }
  149. WaitForSingleObject(hThread, INFINITE);
  151. CloseHandle(hProcess);
  152. CloseHandle(hThread);
  154. return 0;
  155. }
  157. #endif