As shown in figure,
Please get messages of the hook chain or method is proposed

CodePudding user response:

So hanging

CodePudding user response:

You wrote it? Cow X!
Hook technology, make before "judgment is manual keyboard input edit box or bar code gun input edit box"!
People remember about process is SetWindowsHookEx==& gt; HOOKPROC==& gt; UnhookWindowsHookEx

CodePudding user response:

These are read into that part of the system is the kernel of
If there is windbg available operation, system test before, now the system estimate little changed
Find a thread first, and then have
THREADINFO - & gt; DESKTOPINFO
DESKTOPINFO a linked list, inside the LIST_ENTRY aphkStart
Here is the chain of each type of Hook, Hook on each floor has a structure Hook

CodePudding user response:

Use spy++ grab this window, and then get it handles, again to get the content inside

CodePudding user response:

 
SetWindowsHookEx 
WH_GETMESSAGE 

CodePudding user response:

Must be exist in the process of the operating system of the hook chain a data structure, a method is to find its address, copy out,
One way is to do a global API HOOK, HOOK SetWindowsHookEx this API, nature can record the HOOK chain

CodePudding user response:

Spy++ is open source,