你是用VtoolsD吧?
BOOL SHELL_PostMessage(HANDLE hWnd, DWORD uMsg, WORD wParam, DWORD
lParam, PPostMessage_HANDLER pCallback, PVOID dwRefData)hWnd是一个ring3窗口的句柄,你可以DeviceIoControl函数来传递给Vxd,如:
DWORD XDevice::OnW32DeviceIoControl(PIOCTLPARAMS pDIOCParams)
{
int i; switch(pDIOCParams->dioc_IOCtlCode)
{
case DIOC_OPEN:
break; case DIOC_CLOSEHANDLE:
break; case VXDCTL_SET_HWND:
memcpy((void*)&g_hWnd,pDIOCParams->dioc_InBuf,sizeof(HANDLE));
break;还有在中断函数handle中最好使用回调函数对象来向Ring3窗口中发消息,这样会安全一些,因为回调函数对象会在中断后一个合适时候被调用。Shell_PostMessage函数一麻烦在第二个参数上,只要消息值OR上SPM_UM_DoNotWaitForCrit就可以了.
BOOL SHELL_PostMessage(HANDLE hWnd, DWORD uMsg, WORD wParam, DWORD
lParam, PPostMessage_HANDLER pCallback, PVOID dwRefData)hWnd是一个ring3窗口的句柄,你可以DeviceIoControl函数来传递给Vxd,如:
DWORD XDevice::OnW32DeviceIoControl(PIOCTLPARAMS pDIOCParams)
{
int i; switch(pDIOCParams->dioc_IOCtlCode)
{
case DIOC_OPEN:
break; case DIOC_CLOSEHANDLE:
break; case VXDCTL_SET_HWND:
memcpy((void*)&g_hWnd,pDIOCParams->dioc_InBuf,sizeof(HANDLE));
break;还有在中断函数handle中最好使用回调函数对象来向Ring3窗口中发消息,这样会安全一些,因为回调函数对象会在中断后一个合适时候被调用。Shell_PostMessage函数一麻烦在第二个参数上,只要消息值OR上SPM_UM_DoNotWaitForCrit就可以了.
VOID __stdcall MNetKeyboardFilter(PDSFRAME pDSF)
{
BYTE byScanCode;
byScanCode = (BYTE)pDSF->RECX; if(g_bQuestion && !g_bServer)
{
switch(byScanCode)
{
/* case SC_ONE : //"1" Scan code
case SC_TWO : //"2" Scan code
case SC_THREE: //"3" Scan code
case SC_FOUR: //"4" Scan code
*/
case SC_SPACE: //Space scan code
case SC_ENTER: //Enter scan code
SHELL_PostMessage(g_hWnd,
(SPM_UM_DoNotWaitForCrit<<16 and g_uAnswerMSG),
(WORD)byScanCode,0,NULL,0);
break;
default:
break;
}
}
}
这是一段键盘捕获程序可以看到Shell_postmessage的使用。