detours钩子获取剪切板内容

2021-11-06

Detours是微软提供的一个开发库，使用它可以简单、高校、稳定地实现API HOOK的功能。

以下是Hook剪切板内容为例

#pragma once
#include <windows.h>

#define WM_GLOBALHOOKNOTIFY_MSG	(WM_USER + 4323)
#define ID_GETCLIPBOARDDATA_EVENT	1

typedef HANDLE(WINAPI* MyGetClipboardData)(UINT uFormat);
MyGetClipboardData lpMyGetClipboardData = NULL;
FARPROC pfOldGetClipboardData;

BYTE OldCode[5];
BYTE NewCode[5];
HANDLE g_hProcess = NULL;

void HookGetClipBoardData();
void UnHookGetClipBoardData();

void HookGetClipBoardData()
{
	if (g_hProcess == NULL)
		return;
	DWORD dwTemp = 0;
	DWORD dwOldProtect;
	VirtualProtectEx(g_hProcess, pfOldGetClipboardData, 5, PAGE_READWRITE, &dwOldProtect);
	WriteProcessMemory(g_hProcess, pfOldGetClipboardData, NewCode, 5, 0);
	VirtualProtectEx(g_hProcess, pfOldGetClipboardData, 5, dwOldProtect, &dwTemp);
}

void UnHookGetClipBoardData()
{
	if (g_hProcess == NULL)
		return;
	DWORD dwTemp = 0;
	DWORD dwOldProtect;
	VirtualProtectEx(g_hProcess, pfOldGetClipboardData, 5, PAGE_READWRITE, &dwOldProtect);
	WriteProcessMemory(g_hProcess, pfOldGetClipboardData, OldCode, 5, 0);
	VirtualProtectEx(g_hProcess, pfOldGetClipboardData, 5, dwOldProtect, &dwTemp);
}

HANDLE WINAPI MyGetClipboardDataFunc(UINT uFormat)
{
	if (uFormat == CF_TEXT || uFormat == CF_UNICODETEXT)
	{
		HWND hMyMainWnd = ::FindWindowA("MyMainWnd", "我的程序");
		if (hMyMainWnd)
			PostMessage(hMyMainWnd, WM_GLOBALHOOKNOTIFY_MSG, ID_GETCLIPBOARDDATA_EVENT, 0);
	}
	UnHookGetClipBoardData();
	HANDLE hdle = ::GetClipboardData(uFormat);
	HookGetClipBoardData();
	return hdle;
}