VC++实现读取本地已登录的QQ号及应用代码

VC++实现读取本地已登录的QQ号及应用代码

#include "stdafx.h"  
  
//对比数据，找到相同字节集的偏移  
int GetInBuffer(const void *pStart, int nLen, const void *pFindBuffer, int nfLen)  
{  
    for (int i = 0; i < nLen - nfLen; i++)  
    {  
        if (memcmp((void *)((ULONG)pStart + i), pFindBuffer, nfLen) == 0)  
        {  
            return i;  
        }  
    }  
  
    return -1;  
}  
  
void ReadQQ(DWORD dwProcessId)  
{  
    //由于QQ是使用Unicode字符集的，所以我们使用wchar_t类型  
    static wchar_t QQDATA[] = L"Msg2.0.db";   
    //MsgEx.db，好像以前有个版本的数据库文件是MsgEx.db，用MsgEx来当关键字检索速度会变慢。  
    //但是QQ2010的是用Msg2.0.db的。  
  
    //打开进程  
    HANDLE hProcess = OpenProcess(PROCESS_VM_READ | PROCESS_QUERY_INFORMATION, 0, dwProcessId);  
  
    int nMemLen = 28, nMemStart;  
    void *pMemAddress = NULL;  
    BYTE *bMemBuffer;  
  
    MEMORY_BASIC_INFORMATION mbi;  
    memset(&mbi, 0, sizeof(MEMORY_BASIC_INFORMATION));  
  
    wchar_t szQQnumber[15];  
    szQQnumber[0] = 0;  
  
    //寻找进程空间  
    while (VirtualQueryEx(hProcess, pMemAddress, &mbi, nMemLen) != 0)  
    {  
        if (mbi.Type == MEM_PRIVATE && mbi.Protect == PAGE_READWRITE)  
        {  
            //分配足够的内存空间，存放数据  
            bMemBuffer = new BYTE[mbi.RegionSize + 1];  
            bMemBuffer[mbi.RegionSize] = 0;  
  
            if (ReadProcessMemory(hProcess, pMemAddress, bMemBuffer, mbi.RegionSize, NULL))  
            {  
                //尝试寻找当前内存空间中是否包含Msg2.0.db  
                nMemStart = GetInBuffer(bMemBuffer, mbi.RegionSize, QQDATA, sizeof(QQDATA));  
  
                if (nMemStart != -1)  
                {  
                    //向前推一定位置，因为路径是 ..\[QQ号]\Msg2.0.db  
  
                    wchar_t *pQQText = (wchar_t *)&bMemBuffer[nMemStart - 28];  
                    wchar_t *pQQstart = wcsstr(pQQText, L"\\");  
                    if (pQQstart)  
                    {  
                        pQQstart++;  
                        wchar_t *pQQEnd = wcsstr(pQQstart, L"\\");  
                        if (pQQEnd)  
                        {  
                            lstrcpynW(szQQnumber, pQQstart, pQQEnd - pQQstart + 1);  
                            wprintf(L"%s\n", szQQnumber);  
                        }  
                    }  
  
                    delete[] bMemBuffer;  
                    break;  
                }  
            }  
  
            //销毁刚刚分配的内存空间  
            delete[] bMemBuffer;  
  
        }  
        pMemAddress = (void *)((ULONG)pMemAddress + mbi.RegionSize);  
    }  
  
    CloseHandle(hProcess);  
}  
  
void FindQQ()  
{  
    DWORD dwProcessId = 0;  
    //进程快照~  
    HANDLE Snapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0);  
  
    PROCESSENTRY32 pl;  
    pl.dwSize=sizeof(PROCESSENTRY32);  
  
  
    bool bmore=Process32First(Snapshot, &pl);  
    while(bmore)  
    {  
  
        if(lstrcmpi(pl.szExeFile, _T("QQ.exe")) == 0)  
        {  
            //读取QQ号  
            ReadQQ(pl.th32ProcessID);  
            //dwProcessId = pl.th32ProcessID;  
            //循环，读取本地所有登录的QQ号。  
            //break;    跳出循环  
        }  
        bmore= Process32Next(Snapshot, &pl);  
    }  
  
    CloseHandle(Snapshot);  
//  return dwProcessId;  
}  
  
  
int _tmain(int argc, _TCHAR* argv[])  
{  
    FindQQ();  
    scanf("%*c");  
    return 0;  
}