madCollection for bcb hook调用

将madCodeHook_.bpi,madCodeHook_.bpl,madBasic_.bpi,madBasic_.bpl,madDisAsm_.bpi
madDisAsm_.bpl,madRemote_.bpi,madRemote_.bpl组件复制到
C:\Program Files\Borland\CBuilder6\Projects\Bpl目录中
将madCHook.dll复制到当前工程目录中
将madCodeHook.h,madType.hpp,madDisAsm.hpp,madStrings.hpp,madTools.hpp,madStrings.h
复制到当前工程目录中

.cpp文件中
#include "madCodeHook.h"
//声明一个参数规格相同的函数指针
DWORD __stdcall(* WinExecNextHook )(char *cmdLine,DWORD showCmd);

DWORD __stdcall WinExecHookProc(char *cmdLine, DWORD showCmd)
{
  if (MessageBox(0, cmdLine, "进入HOOK函数中", MB_YESNO | MB_ICONQUESTION) == 6 )
    return WinExecNextHook(cmdLine, showCmd);
  else
    return  ERROR_ACCESS_DENIED;
}

void __fastcall TForm1::Button1Click(TObject *Sender)
{
  //hook函数
  HookAPI("kernel32.dll", "WinExec", (void *)WinExecHookProc, (void *)WinExecNextHook);
  //调用WinExec将进入winExecHookProc
  WinExec("notepad.exe", SW_SHOWNORMAL);
  //取消hook
  UnhookAPI((void *)WinExecNextHook);

}
//---------------------------------------------------------------------------



  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
内含madCollection.exe控件 EXE的格式的 至于其他控件 网上有很多,都是可以找得到的 XP SP3 DELPHI7 调试通过 # 压缩文件 F:\rar\delphi控件包\Coolvibes.rar 2010-04-09 20:18 331 247 Coolvibes\Client\Configuracion.ini 2009-08-17 22:40 1264 514 Coolvibes\Client\Coolvibes.dpr 2008-11-18 16:44 5120 1395 Coolvibes\Client\Coolvibes.res 2010-05-03 21:14 106 78 Coolvibes\Client\DeleteAll.bat 2008-10-29 23:00 387931 283038 Coolvibes\Client\jpgcool.jpg 2008-10-29 22:54 564 337 Coolvibes\Client\ScreenMaxCap.dfm 2006-12-29 17:55 1611 672 Coolvibes\Client\ScreenMaxCap.pas 2008-08-12 18:35 241391 77814 Coolvibes\Client\UnitAbout.dfm 2008-08-12 18:35 1832 715 Coolvibes\Client\UnitAbout.pas 2008-11-18 16:47 19927 4945 Coolvibes\Client\UnitFormConfigServer.dfm 2008-11-18 16:49 11149 3095 Coolvibes\Client\UnitFormConfigServer.pas 2008-10-29 23:19 294736 55181 Coolvibes\Client\UnitFormControl.dfm 2008-01-25 20:59 66888 11606 Coolvibes\Client\UnitFormControl.pas 2008-01-25 16:01 112254 7821 Coolvibes\Client\UnitFormNotifica.dfm 2006-11-11 01:24 2206 804 Coolvibes\Client\UnitFormNotifica.pas 2006-10-10 19:01 1428 532 Coolvibes\Client\UnitFormReg.dfm 2006-12-25 09:03 2691 994 Coolvibes\Client\UnitFormReg.pas 2008-01-26 18:46 14076 1739 Coolvibes\Client\UnitFormSendKeys.dfm 2007-11-27 11:55 4972 1405 Coolvibes\Client\UnitFormSendKeys.pas 2006-12-28 19:07 1551 598 Coolvibes\Client\UnitFunciones.pas 2008-01-27 03:45 6141 1955 Coolvibes\Client\UnitID.dfm 2006-12-29 03:31 1040 514 Coolvibes\Client\UnitID.pas 2010-04-24 20:57 20944 6200 Coolvibes\Client\UnitMain.dfm 2008-08-12 18:34 22695
madCollection 2.5.6.0 安装版(无源码) MadCollection,是一款集成在 Delphi (D5, D6, D7, D8, D9, BDS2006, D2007) IDE 下的辅助工具,能快速生成带 Error Report 功能的应用程序。能将错误报告发送到指定邮箱、服务器、记录在本地文件中等。其报告可具体指出出错的代码行,以及机器当前信息、寄存器信息等诸多重要诊断信息。还可以完全自定义出错后的界面。The "madBasic" package contains several units, which implement a lot ofbasic functionality like standard type definitions (madTypes), string handling (madStrings), simplified message handling (madTools), compression(madZip) and crypting and encoding (madCrypt). Then the base interfaces for the other mad* packages are defined (unit madBasic). Finally some lists are implemented (madLists). As a bonus I've recently added a unit which can modify the resources of dlls/exes (unit madRes).The package "madCodeHook" offers everything you need to hook code (mostly APIs). Usually such hooks show effect only in the current process. But madCodeHook also can inject a specified DLL into any desired 32bit process or even "system wide" (that is into all currently running and into all in the future created processes). So by putting your hooking stuff into a little DLL and injecting it "system wide", you can realize effective and easy to use system wide API hooking. Of course everything works just as fine under both OS families (9x/NT).The package "madDisAsm" features a full x86 disassembler including MMX, 3dNow enhanced, SSE and SSE2 support. The isassembler can examine a single x86 instruction (see ParseCode) or a full function (see ParseFunction) and either return a short analysis or a full text disassembly. Register contents are watched/followed if possible, this improves the analyses forjump/call targets. Case/switch jump tables are automatically detected and handled correctly.The package "madExcept" was exactly build for that purpose, namely to replace Delphi's standard exception handling with a new logic, which finds out the full callstack with as much details and infos as possible. The exact behaviour of ma
# 压缩文件 F:\rar\delphi控件包\FreeZ_MadCollection.v2.5.7.0_FS.rar 2000-07-09 15:17 0 8 madBasic\Demos\under construction 2000-07-09 15:17 0 8 madDisAsm\Demos\under construction 2000-07-09 15:17 0 8 madKernel\Demos\under construction 2000-07-09 15:17 0 8 madSecurity\Demos\under construction 2003-11-22 16:34 3318 1210 madCodeHook\PowerBasic\ProcessAPI.bas 2003-11-22 16:34 3795 447 madCodeHook\PowerBasic\ProcessFunc.bas 2003-11-23 12:50 1840 208 madCodeHook\PowerBasic\test-DllInjector.bas 2003-11-23 12:51 5308 882 madCodeHook\PowerBasic\test.bas 2004-10-03 10:50 8256 1428 madShell\Demos\DesktopPosSaver.bdsproj 2004-10-03 11:01 8252 77 madCodeHook\Demos\system wide\VariousDlls\DllInjector.bdsproj 2005-04-29 18:01 8243 72 madExcept\Demos\EC.bdsproj 2004-10-03 11:00 8246 80 madCodeHook\Demos\system wide\VariousDlls\Empty.bdsproj 2004-10-03 10:36 8249 77 madExcept\Demos\ExcCatch.bdsproj 2004-10-03 11:00 8253 78 madCodeHook\Demos\system wide\VariousDlls\HookDirect3D.bdsproj 2004-10-03 11:01 8256 77 madCodeHook\Demos\system wide\VariousDlls\HookLoadLibrary.bdsproj 2004-10-03 10:56 8254 78 madCodeHook\Demos\system wide\PrintMonitor\HookPrintAPIs.bdsproj 2004-10-03 11:01 8260 78 madCodeHook\Demos\system wide\VariousDlls\HookProcessCreation.bdsproj 2004-10-03 10:55 8263 81 madCodeHook\Demos\system wide\HookProcessTermination\HookProcessTermination.bdsproj 2004-10-03 10:55 8258 74 madCodeHook\Demos\system wide\HookProcessTermination\HookTerminateAPIs.bdsproj 2004-10-03 10:55 8254 227 madCodeHook\Demos\system wide\HookProcessTermination\InjectService.bdsproj 2004-1

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值