[00030]-[2015-09-26]-[00]-[DLL注入应用案例---修改任务管理器的实现]

// TaskManager.cpp
#include "StdAfx.h"
#include <stdio.h>
#include <stdlib.h>
#include <commctrl.h>
#include "TaskManager.h"

HWND hwndNetWorkList;    // 任务管理器上面List控件的句柄

typedef struct _TaskManagerDlgItem
{
    DWORD itemID;
    HWND hWnd;
}TaskManagerDlgItem, *PTaskManagerDlgItem;


BOOL CALLBACK _EnumChidCtlProc(HWND hWnd, LPARAM lParam)
{
    PTaskManagerDlgItem pItem = (PTaskManagerDlgItem)lParam;
    
    if((DWORD)GetDlgCtrlID(hWnd) == pItem->itemID)
    {
        pItem->hWnd = hWnd;
        return FALSE;
    }
    
    return TRUE;
}

// 根据控件ID获取控件的窗口句柄
HWND GetHWNDByID(DWORD nCtlId)
{
    TaskManagerDlgItem item;
    item.itemID = nCtlId;
    item.hWnd = NULL;

    HWND hWndTaskManager = FindWindow((LPCTSTR)32770, "Windows 任务管理

器");
    if(hWndTaskManager == NULL)
    {
        MessageBox(NULL, "请先运行任务管理器!", "Info", MB_OK);
        return NULL;
    }

    EnumChildWindows(hWndTaskManager, _EnumChidCtlProc, (LPARAM)&item);

    return item.hWnd;
}

// 获取listView的列数
int GetListCtlColmnCount(HWND hList)
{
    int count = 0;
    char caption[MAX_PATH];

    LVCOLUMN lvc;
    lvc.mask = LVCF_TEXT;
    lvc.cchTextMax = MAX_PATH;
    lvc.pszText = caption;

    for(int i = 0; i < 50; i++)
    {
        ZeroMemory(caption, sizeof(caption));

        SendMessage(hList, LVM_GETCOLUMN, i, (long)&lvc);
        if(caption[0]==0 && caption[1]==0)
        {
            count = i;
            break;
        }
    }

    return count;
}

// 向listView控件插入两列
void InsertColToListCtl(HWND hList)
{
    int n = GetListCtlColmnCount(hList);

    LV_COLUMN colmn;
    ZeroMemory(&colmn, sizeof(LV_COLUMN));

    colmn.mask = LVCF_TEXT|LVCF_WIDTH|LVCF_SUBITEM;
    colmn.fmt = LVCFMT_RIGHT;

    colmn.cx = 0x60;

    colmn.pszText = "下载";
    SendMessage(hList, LVM_INSERTCOLUMN, n, (LPARAM)&colmn);

    colmn.pszText = "上传";
    SendMessage(hList, LVM_INSERTCOLUMN, n+1, (LPARAM)&colmn);
}

void ModifyTaskManager()
{
    hwndNetWorkList = GetHWNDByID(2600);
    InsertColToListCtl(hwndNetWorkList);
}

// TaskManager.h
#ifndef _TASKMANAGER_H_
#define _TASKMANAGER_H_

void ModifyTaskManager();

#endif

// MyDll.cpp
#include "stdafx.h"
#include "TaskManager.h"

BOOL APIENTRY DllMain( HANDLE hModule, 
                       DWORD  ul_reason_for_call, 
                       LPVOID lpReserved
                     )
{
    switch(ul_reason_for_call)
    {
    case DLL_PROCESS_ATTACH:
        // 一旦DLL文件加载 就初始执行一个函数 once Attach
        ModifyTaskManager();
        //MessageBox(NULL, "Hello, World !", "Info", MB_OK);
        break;
    case DLL_PROCESS_DETACH:
        break;
    case DLL_THREAD_ATTACH:
        break;
    case DLL_THREAD_DETACH:
        break;
    }
    return TRUE;
}