HINTERNET
WINAPI
__InternetOpenUrlA(
IN HINTERNET hInternet,
IN LPCSTR lpszUrl,
IN LPCSTR lpszHeaders OPTIONAL,
IN DWORD dwHeadersLength,
IN DWORD dwFlags,
IN DWORD dwContext
)
{
// 过滤之前, 自动调用原函数
// callOriginal 模拟调用原函数
// callOriginal 函数必须内联编译到此函数中
// callOriginal 传入第一个参数地址,和最后一个参数地址
HINTERNET hFile = (HINTERNET)callOriginal(&hInternet, &dwContext); //此时调用的是 InternetOpenUrlA()
if (hFile && lpszUrl)
MessageBoxA(NULL, lpszUrl, "__InternetOpenUrlA", MB_OK);
return hFile;
}
int
WINAPI
__MessageBoxA(HWND hWnd ,
LPCSTR lpText,
LPCSTR lpCaption,
UINT uType)
{
if (lpText == NULL)
lpText = "lpText";
if (lpCaption == NULL)
lpCaption = "lpCaption";
// 过滤之后, 自动调用原函数
// callOriginal 模拟调用原函数
// callOriginal 函数必须内联编译到此函数中
// callOriginal 传入第一个参数地址,和最后一个参数地址
return (int)callOriginal(&hWnd, &uType); //此时调用的是 MessageBoxA()
}
BOOL APIENTRY DllMain( HANDLE hModule, DWORD fdwReason, LPVOID lpReserved)
{
FARPROC proc;
switch (fdwReason) {
case DLL_PROCESS_ATTACH:
//
// 挂钩
//
proc = GetProcAddress(LoadLibraryA("wininet"),
"InternetOpenUrlA");
inlineHeadHook( proc, lookupAddr((FARPROC)__InternetOpenUrlA) );
//
// 挂钩
//
proc = GetProcAddress(LoadLibraryA("user32"),
"MessageBoxA");
inlineHeadHook( proc, lookupAddr((FARPROC)__MessageBoxA) );
MessageBoxA(0, 0, 0, 0);
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
