📄 csdn_文档中心_深入解析钩子和动态链接库（上）.htm
字号:
<SCRIPT language=JavaScript>
<!--
document.ns = navigator.appName == "Netscape"
tmpDate = new Date();
date = tmpDate.getDate();
month= tmpDate.getMonth() + 1 ;
if(document.ns)
{
year1=tmpDate.getYear()
year= year1.toString().substr(1,2);
}
else
year= tmpDate.getYear();
document.write(year);
document.write(".");
document.write(month);
document.write(".");
document.write(date);
// -->
</SCRIPT>
</B> </TD></TR>
<TR bgColor=#999999>
<TD colSpan=3 height=1></TD></TR></TBODY></TABLE>
<TABLE border=0 width=770>
<TBODY>
<TR>
<TD align=middle bgColor=#fafafa class=td1 vAlign=top width=150><BR>
<SCRIPT src="CSDN_文档中心_深入解析钩子和动态链接库（上）.files/microsoft.js"></SCRIPT>
</TD>
<TD align=middle width=620>
<TABLE bgColor=#eeeeee border=0 cellPadding=0 cellSpacing=0 width=600>
<TBODY>
<TR bgColor=#ffffff>
<TD align=middle height=10 width=50></TD>
<TD align=right><A href="http://www.csdn.net/">CSDN</A> - <A
href="http://www.csdn.net/develop/">文档中心</A> - <FONT
color=#003399>Visual C++</FONT> </TD></TR>
<TR>
<TD align=middle height=5></TD>
<TD align=middle width=500></TD></TR>
<TR>
<TD align=middle bgColor=#003399 height=10><FONT
color=#ffffff>标题</FONT></TD>
<TD><B> 深入解析钩子和动态链接库（上）</B> ashao1981（翻译）
</TD></TR>
<TR>
<TD align=middle height=5></TD>
<TD align=middle width=500></TD></TR>
<TR>
<TD align=middle bgColor=#003399><FONT color=#ffffff>关键字</FONT></TD>
<TD width=500> DLL 钩子 hook</TD></TR>
<TR>
<TD align=middle height=5></TD>
<TD align=middle width=500></TD></TR>
<TR>
<TD align=middle bgColor=#003399 height=10><FONT
color=#ffffff>出处</FONT></TD>
<TD height=10> <A
href="http://www.codeproject.com/dll/hooks.asp">http://www.codeproject.com/dll/hooks.asp</A></TD></TR>
<TR>
<TD align=middle height=10></TD>
<TD height=10></TD></TR></TBODY></TABLE><!--文章说明信息结束//-->
<TABLE border=0 width=600>
<TBODY>
<TR>
<TD align=left><BR>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-outline-level: 2"><SPAN
lang=EN-US style="FONT-FAMILY: Verdana; FONT-SIZE: 9pt"><A
href="http://www.codeproject.com/dll/hooks/hooks.zip"><SPAN
style="FONT-FAMILY: 宋体; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana">下载源代码</SPAN>
- 22 Kb</A></SPAN><B><SPAN lang=EN-US
style="COLOR: #ff9900; FONT-FAMILY: Verdana; FONT-SIZE: 13pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"><?xml:namespace
prefix = o ns = "urn:schemas-microsoft-com:office:office"
/><o:p></o:p></SPAN></B></P>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-outline-level: 2"><B><SPAN
style="COLOR: #ff9900; FONT-FAMILY: 宋体; FONT-SIZE: 13pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"></SPAN></B><B><SPAN
lang=EN-US
style="COLOR: #ff9900; FONT-FAMILY: Verdana; FONT-SIZE: 13pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"><o:p><FONT
face=宋体></FONT></o:p></SPAN></B> </P>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan"><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">
对于如何使用和创建钩子有许多的争议，这篇文章试图澄清这些问题。</SPAN><SPAN lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"><o:p></o:p></SPAN></P>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan"><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">注意：如果你只是在自己的进程内使用钩子则没有下面的问题，</SPAN><SPAN
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">
</SPAN><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">这只发生在你使用系统钩子的时候。</SPAN></P>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan"><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"></SPAN><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"><o:p></o:p></SPAN> </P>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan"><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">
关键问题在于</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">
</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt; mso-bidi-font-size: 12.0pt">地址空间</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">，</SPAN></B><B><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">DLL</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">函数中的代码所创建的任何对象（包括变量）都归调用它的线程或进程所有。当进程在载入</SPAN></B><B><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">DLL</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">时，操作系统自动把</SPAN></B><B><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">DLL</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">地址映射到该进程的私有空间，也就是进程的虚拟地址空间，而且也复制该</SPAN></B><B><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">DLL</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">的全局数据的一份拷贝到该进程空间。也就是说每个进程所拥有的相同的</SPAN></B><B><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">DLL</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">的全局数据，是私有的，</SPAN></B><B><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: Arial; mso-font-kerning: 0pt; mso-bidi-font-size: 9.0pt">DLL</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt; mso-bidi-font-size: 9.0pt">成为进程的一部分，以这个进程的身份执行，使用这个进程的堆栈。</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: Arial; mso-font-kerning: 0pt">这意味着数据会被重新初始化。</SPAN></B><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">典型地，它们将是零。</SPAN></B></P>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan"><B><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"></SPAN></B><B><SPAN
lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"><o:p></o:p></SPAN></B> </P>
<P align=left class=MsoNormal
style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan"><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">
有人建议在</SPAN><SPAN lang=EN-US
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">DLL</SPAN><SPAN
style="COLOR: black; FONT-FAMILY: 宋体; FONT-SIZE: 10pt; mso-ascii-font-family: Verdana; mso-hansi-font-family: Verdana; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">上存放数据的地址。</SPAN><SPAN
style="COLOR: black; FONT-FAMILY: Verdana; FONT-SIZE: 10pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">
</SPAN><SPAN
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -