Пожалуйста, написал код, который позволяет брать текст любого листвью:
| Код |
type
TRemoteInfo = record
LoadLibrary: function(lpLibFileName: PChar): HMODULE; stdcall;
GetProcAddress: function(hModule: HMODULE;
lpProcName: LPCSTR): FARPROC; stdcall;
Kernel32 : array[0..16] of Char;
nExitThread : array[0..16] of Char;
nVirtualAlloc : array[0..16] of Char;
Size : Cardinal;
Res : Pointer;
end;
function InjectMemory(Process: dword; Memory: pointer; Size: dword): pointer;
begin
Result := VirtualAllocEx(Process, nil, Size, MEM_COMMIT or MEM_RESERVE,
PAGE_EXECUTE_READWRITE);
WriteProcessMemory(Process, Result, Memory, Size, DWORD(nil^));
end;
procedure RemoteThread(RemoteInfo: pointer); stdcall;
var
ExitThread : procedure(uExitCode: UINT); stdcall;
VirtualAlloc : function(lpvAddress: Pointer; dwSize, flAllocationType,
flProtect: DWORD): Pointer; stdcall;
begin
with TRemoteInfo(RemoteInfo^) do
begin
@VirtualAlloc := GetProcAddress(LoadLibrary(Kernel32), nVirtualAlloc);
@ExitThread := GetProcAddress(LoadLibrary(Kernel32), nExitThread);
Res:=VirtualAlloc(nil, Size, MEM_COMMIT or MEM_RESERVE,
PAGE_EXECUTE_READWRITE);
ExitThread(0);
end;
end;
procedure RemoteThreadEnd; begin end;
function AllocMem(Process, Size: Cardinal):Pointer;
var
TID : cardinal;
RemoteInfo : TRemoteInfo;
pInfo, CodeAdr : pointer;
begin
ZeroMemory(@RemoteInfo, SizeOf(RemoteInfo));
@RemoteInfo.LoadLibrary := GetProcAddress(GetModuleHandle('kernel32.dll'),
'LoadLibraryA');
@RemoteInfo.GetProcAddress := GetProcAddress(GetModuleHandle('kernel32.dll'),
'GetProcAddress');
RemoteInfo.Size:= Size;
RemoteInfo.Kernel32:= 'kernel32.dll';
RemoteInfo.nVirtualAlloc:= 'VirtualAlloc';
RemoteInfo.nExitThread:= 'ExitThread';
pInfo := InjectMemory(Process, @RemoteInfo, SizeOf(TRemoteInfo));
CodeAdr := InjectMemory(Process, @RemoteThread,
dword(@RemoteThreadEnd) - dword(@RemoteThread));
CreateRemoteThread(process, nil, 0, CodeAdr, pInfo, 0, TID);
//WaitForSingleObject(TID, INFINITE);
{А вот здесь у меня лыжи не едут или я... WaitForSingleObject возвращает
WAIT_FAILED, а GetLastError 1447 - ERROR_NO_SCROLLBARS =))) }
sleep(0);
ReadProcessMemory(Process, pInfo, @RemoteInfo, SizeOf(RemoteInfo), DWORD(nil^));
Result:= RemoteInfo.Res;
end;
procedure ListView_GetItemTextEx (wnd: HWND; i, iSubItem: Integer;
pszText: PChar; cchTextMax: Integer);
var
Text, p : Pointer;
Process : Cardinal;
Item : TLVItemA;
begin
GetWindowThreadProcessId(wnd,process);
Process:= OpenProcess(PROCESS_VM_READ or PROCESS_VM_WRITE or
PROCESS_VM_OPERATION or PROCESS_CREATE_THREAD,false,process);
Text:= AllocMem(Process, cchTextMax);
p:= AllocMem(Process, SizeOf(TLVItemA));
Item.iSubItem:= iSubItem;
Item.cchTextMax:= cchTextMax;
Item.pszText:= Text;
WriteProcessMemory(Process, p, @Item, SizeOf(TLVItemA), DWORD(nil^));
SendMessage(wnd, LVM_GETITEMTEXT, i, Longint(p));
ReadProcessMemory(Process, Text, pszText, cchTextMax, DWORD(nil^));
end;
.....
procedure TForm1.Button1Click(Sender: TObject);
var
a : array[1..MAX_PATH] of Char;
begin
ListView_GetItemTextEx (FindWindowEx (FindWindow (nil, 'Форма с листвью',
0,'TListView',nil), 0, 0, @a, MAX_PATH);
ShowMessage(a);
end;
|
Как работает: внедряем поток в чужой процесс, который выделят память, просим ListView послать данные в эту область памяти и читаем их оттуда. Как видите есть небольшая проблемка с WaitForSingleObject.
ЗЫ: мож в арсенал форумистов добавить или в DRKB? |
