wh_journalrecord

最新推荐文章于 2023-12-12 21:03:52 发布

原创最新推荐文章于 2023-12-12 21:03:52 发布 · 1.2k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#callback #playback #hook #null #ios #action

c/c++ 专栏收录该内容

3 篇文章

订阅专栏

本文介绍了一个简单的键盘记录器及回放系统的实现方法。该系统利用Windows API进行按键记录，并将记录的数据保存到文件中；同时具备从文件读取记录并模拟按键输入的功能。通过设置钩子函数拦截按键消息，实现了按键的精确捕捉与回放。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

#pragma once #include <Windows.h> class recorderplay { public: recorderplay(void); virtual ~recorderplay(void); void recorder(const char*); void play(const char*); };

#include "StdAfx.h" #include "recorderplay.h" EVENTMSG esg; DWORD basetime; HHOOK rphook; extern CListBox* plistbox; CString strmsg; ifstream in; ofstream out; void unhook(void); LRESULT CALLBACK JournalRecordProc( int code, // hook code WPARAM wParam, // not used LPARAM lParam // message being processed ) { int pos; if (code<0) return CallNextHookEx(rphook,code,wParam,lParam); if (code==HC_ACTION) { esg=*(PEVENTMSG)lParam; esg.time=esg.time-basetime; out.write((char*)&esg,sizeof(esg)); strmsg.Format(L"%d %d %d pos:%d",esg.message,esg.paramL,esg.time,pos=out.tellp()); plistbox->AddString(strmsg); if ((esg.message>WM_KEYFIRST)&&(esg.message<WM_KEYLAST)&&(LOBYTE(esg.paramL)==VK_F12)) { strmsg.Format(L"%d",pos=out.tellp()); out.close();plistbox->AddString(L"stop pos:"+strmsg);unhook(); } } return CallNextHookEx(rphook,code,wParam,lParam); } LRESULT CALLBACK JournalPlaybackProc( int code, // hook code WPARAM wParam, // not used LPARAM lParam // message being processed ) { int pos; if (code<0) return CallNextHookEx(rphook,code,wParam,lParam); if (code==HC_SKIP) { in.read((char*)&esg,sizeof(esg)); if (pos=in.tellg()<0) {plistbox->AddString(L"eof");in.close();unhook();return 0;} strmsg.Format(L"%d %d %d pos:%d",esg.message,esg.paramL,esg.time,pos=in.tellg()); plistbox->AddString(strmsg); esg.time=basetime+esg.time; } if (code==HC_GETNEXT) { if (esg.time-GetTickCount()<0) { *(PEVENTMSG(lParam))=esg; return 0; } else { *(PEVENTMSG(lParam))=esg; return esg.time-GetTickCount(); } } return CallNextHookEx(rphook,code,wParam,lParam); } void unhook(void) { if (rphook) UnhookWindowsHookEx(rphook); MessageBoxA(NULL,"unhookwindowshook finished","record and playback",MB_OK); } recorderplay::recorderplay(void) { } recorderplay::~recorderplay(void) { } void recorderplay::recorder(const char*a) { out.open(a,ios::binary|ios::out); rphook=SetWindowsHookEx(WH_JOURNALRECORD,JournalRecordProc,GetModuleHandle(NULL),0); basetime=GetTickCount(); } void recorderplay::play(const char*a) { in.open(a,ios::binary); rphook=SetWindowsHookEx(WH_JOURNALPLAYBACK,JournalPlaybackProc,GetModuleHandle(NULL),0); basetime=GetTickCount(); }