50 if (
Event > EVENT_OBJECT_STATECHANGE )
64 if (
Event <= EVENT_SYSTEM_MENUPOPUPEND )
123 ne.idObject = idObject;
124 ne.idChild = idChild;
207 PHOOK pHook, phkNext;
367 pusmodName = &USModuleName;
442 TRACE(
"ClientLoadLibrary: pid: %d, strLibraryName: %S, " 443 "strInitFuncName: %S, bUnload: %d, bApiHook:%d\n",
451 if (bUnload ==
FALSE)
490 if (bResult ==
FALSE)
584 TRACE(
"Reloading Hook Module.\n");
587 ERR(
"Failed to load Hook Module.\n");
612 CbtCreatewndw.
lpcs = &Csw;
645 ERR(
"HCBT_ not supported = %d\n", Common->
Code);
663 ERR(
"Null Proc! Common = 0x%x, Proc = 0x%x\n",Common,Proc);
669 CbtCreatewndExtra->
Cs.
x = CbtCreatewndw.
lpcs->
x;
670 CbtCreatewndExtra->
Cs.
y = CbtCreatewndw.
lpcs->
y;
671 CbtCreatewndExtra->
Cs.
cx = CbtCreatewndw.
lpcs->
cx;
672 CbtCreatewndExtra->
Cs.
cy = CbtCreatewndw.
lpcs->
cy;
769 ERR(
"WH_ not supported = %d\n", Common->
HookId);
774 ERR(
"Hook Exception! Id: %d, Code %d, Proc 0x%x\n",Common->
HookId,Common->
Code,Proc);
800 ERR(
"Error check for module!\n");
806 TRACE(
"Reloading Event Module.\n");
809 ERR(
"Failed to load Event Module.\n");
BOOL WINAPI DeregisterShellHookWindow(HWND hWnd)
struct tagCWPSTRUCT * PCWPSTRUCT
#define ERROR_INVALID_PARAMETER
#define HCBT_CLICKSKIPPED
DWORD WINAPI GetModuleFileNameW(HINSTANCE hModule, LPWSTR lpFilename, DWORD nSize)
struct tagCWPSTRUCT CWPSTRUCT
HHOOK WINAPI SetWindowsHookExA(int idHook, HOOKPROC lpfn, HINSTANCE hMod, DWORD dwThreadId)
struct _EVENTPROC_CALLBACK_ARGUMENTS * PEVENTPROC_CALLBACK_ARGUMENTS
NTSYSAPI VOID NTAPI RtlCopyMemory(VOID UNALIGNED *Destination, CONST VOID UNALIGNED *Source, ULONG Length)
WINE_DEFAULT_DEBUG_CHANNEL(user32)
BOOL NTAPI NtUserCallMsgFilter(LPMSG msg, INT code)
HINSTANCE WINAPI DECLSPEC_HOTPATCH LoadLibraryExW(LPCWSTR lpLibFileName, HANDLE hFile, DWORD dwFlags)
TW_UINT32 TW_UINT16 TW_UINT16 MSG
struct _HOOKPROC_CALLBACK_ARGUMENTS * PHOOKPROC_CALLBACK_ARGUMENTS
HHOOK WINAPI SetWindowsHookW(int idHook, HOOKPROC lpfn)
BOOL WINAPI ClearUserApiHook(HINSTANCE hInstance)
struct tagCWPRETSTRUCT * PCWPRETSTRUCT
NTSTATUS WINAPI User32CallClientLoadLibraryFromKernel(PVOID Arguments, ULONG ArgumentLength)
#define SRV_EVENT_STATECHANGE
ACPI_BUFFER *RetBuffer ACPI_BUFFER *RetBuffer char ACPI_WALK_RESOURCE_CALLBACK void *Context ACPI_BUFFER *RetBuffer UINT16 ACPI_RESOURCE **ResourcePtr ACPI_GENERIC_ADDRESS *Reg UINT32 *ReturnValue UINT8 UINT8 *Slp_TypB ACPI_PHYSICAL_ADDRESS PhysicalAddress64 UINT32 UINT32 *TimeElapsed UINT32 ACPI_STATUS const char UINT32 ACPI_STATUS const char UINT32 const char const char * ModuleName
VOID FASTCALL IntNotifyWinEvent(DWORD event, HWND hwnd, LONG idObject, LONG idChild, DWORD flags)
#define GetWin32ClientInfo()
VOID WINAPI NotifyWinEvent(DWORD event, HWND hwnd, LONG idObject, LONG idChild)
#define LOAD_WITH_ALTERED_SEARCH_PATH
EXTINLINE BOOL NtUserxDeregisterShellHookWindow(HWND hWnd)
static HWINEVENTHOOK(WINAPI *pSetWinEventHook)(DWORD
HHOOK WINAPI SetWindowsHookA(int idHook, HOOKPROC lpfn)
BOOL WINAPI UnhookWindowsHook(int nCode, HOOKPROC pfnFilterProc)
LRESULT APIENTRY NtUserCallNextHookEx(int Code, WPARAM wParam, LPARAM lParam, BOOL Ansi)
LRESULT(CALLBACK * HOOKPROC)(int, WPARAM, LPARAM)
UNICODE_STRING strInitFuncName
EXTINLINE BOOL NtUserxRegisterShellHookWindow(HWND hWnd)
#define WH_FOREGROUNDIDLE
NTSYSAPI NTSTATUS NTAPI ZwCallbackReturn(_In_ PVOID Result, _In_ ULONG ResultLength, _In_ NTSTATUS Status)
struct tagCWPRETSTRUCT CWPRETSTRUCT
BOOL(CALLBACK * USERAPIHOOKPROC)(UAPIHK State, PUSERAPIHOOK puah)
_Must_inspect_result_ _In_ ULONG Flags
static __inline PVOID DesktopPtrToUser(PVOID Ptr)
#define SRV_EVENT_NAMECHANGE
HINSTANCE ghmodUserApiHook
BOOL WINAPI IsWinEventHookInstalled(DWORD event)
LRESULT WINAPI CallNextHookEx(HHOOK Hook, int Code, WPARAM wParam, LPARAM lParam)
#define EXCEPTION_EXECUTE_HANDLER
static int Save(const char **args)
#define SRV_EVENT_END_APPLICATION
_At_(*)(_In_ PWSK_CLIENT Client, _In_opt_ PUNICODE_STRING NodeName, _In_opt_ PUNICODE_STRING ServiceName, _In_opt_ ULONG NameSpace, _In_opt_ GUID *Provider, _In_opt_ PADDRINFOEXW Hints, _Outptr_ PADDRINFOEXW *Result, _In_opt_ PEPROCESS OwningProcess, _In_opt_ PETHREAD OwningThread, _Inout_ PIRP Irp Result)(Mem)) NTSTATUS(WSKAPI *PFN_WSK_GET_ADDRESS_INFO
BOOL WINAPI InitUserApiHook(HINSTANCE hInstance, USERAPIHOOKPROC pfn)
HWINEVENTHOOK NTAPI NtUserSetWinEventHook(UINT eventMin, UINT eventMax, HMODULE hmodWinEventProc, PUNICODE_STRING puString, WINEVENTPROC lpfnWinEventProc, DWORD idProcess, DWORD idThread, UINT dwflags)
NTSYSAPI NTSTATUS NTAPI RtlUnicodeStringToAnsiString(PANSI_STRING DestinationString, PUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString)
struct tagMOUSEHOOKSTRUCT * PMOUSEHOOKSTRUCT
#define WH_CALLWNDPROCRET
BOOL WINAPI CallMsgFilterW(LPMSG lpMsg, int nCode)
static BOOL ClientLoadLibrary(PUNICODE_STRING pstrLibName, PUNICODE_STRING pstrInitFunc, BOOL bUnload, BOOL bApiHook)
EXTINLINE VOID NtUserxNotifyWinEvent(HWND hWnd, PVOID ne)
HWINEVENTHOOK WINAPI SetWinEventHook(UINT eventMin, UINT eventMax, HMODULE hmodWinEventProc, WINEVENTPROC pfnWinEventProc, DWORD idProcess, DWORD idThread, UINT dwFlags)
#define FNID_CALLWNDPROCRET
VOID(CALLBACK * WINEVENTPROC)(HWINEVENTHOOK, DWORD, HWND, LONG, LONG, DWORD, DWORD)
_Out_ PCLIENT_ID ClientId
PVOID WINAPI HeapAlloc(HANDLE, DWORD, SIZE_T)
#define NT_SUCCESS(StatCode)
#define ISITHOOKED(HookId)
HHOOK APIENTRY NtUserSetWindowsHookEx(HINSTANCE Mod, PUNICODE_STRING UnsafeModuleName, DWORD ThreadId, int HookId, HOOKPROC HookProc, BOOL Ansi)
#define SRV_EVENT_RUNNING
NTSYSAPI VOID NTAPI RtlFreeAnsiString(PANSI_STRING AnsiString)
static HHOOK FASTCALL IntSetWindowsHook(int idHook, HOOKPROC lpfn, HINSTANCE hMod, DWORD dwThreadId, BOOL bAnsi)
NTSTATUS WINAPI User32CallHookProcFromKernel(PVOID Arguments, ULONG ArgumentLength)
BOOL WINAPI RegisterShellHookWindow(HWND hWnd)
struct _NOTIFYEVENT NOTIFYEVENT
ASSERT((InvokeOnSuccess||InvokeOnError||InvokeOnCancel) ?(CompletionRoutine !=NULL) :TRUE)
#define STATUS_UNSUCCESSFUL
#define WINEVENT_INCONTEXT
static DWORD FASTCALL GetMaskFromEvent(DWORD Event)
_In_ PCCERT_CONTEXT _In_ DWORD dwFlags
BOOL WINAPI CallMsgFilterA(LPMSG lpMsg, int nCode)
struct tagCBTACTIVATESTRUCT * LPCBTACTIVATESTRUCT
BOOL NTAPI NtUserMessageCall(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam, ULONG_PTR ResultInfo, DWORD dwType, BOOL Ansi)
struct _CLIENT_LOAD_LIBRARY_ARGUMENTS * PCLIENT_LOAD_LIBRARY_ARGUMENTS
FORCEINLINE struct _TEB * NtCurrentTeb(VOID)
#define SRV_EVENT_LOCATIONCHANGE
#define SRV_EVENT_VALUECHANGE
#define STATUS_NOT_SUPPORTED
struct tagMSLLHOOKSTRUCT * PMSLLHOOKSTRUCT
HMODULE WINAPI GetModuleHandleW(LPCWSTR lpModuleName)
NTSYSAPI VOID NTAPI RtlInitUnicodeString(PUNICODE_STRING DestinationString, PCWSTR SourceString)
#define GetProcAddress(x, y)
#define _SEH2_EXCEPT(...)
VOID NTAPI NtUserNotifyWinEvent(DWORD Event, HWND hWnd, LONG idObject, LONG idChild)
UNICODE_STRING strLibraryName
struct tagKBDLLHOOKSTRUCT * PKBDLLHOOKSTRUCT
#define HeapFree(x, y, z)
NTSTATUS WINAPI User32CallEventProcFromKernel(PVOID Arguments, ULONG ArgumentLength)
struct _HOOKPROC_CBT_CREATEWND_EXTRA_ARGUMENTS * PHOOKPROC_CBT_CREATEWND_EXTRA_ARGUMENTS
EXTINLINE BOOL NtUserxUnhookWindowsHook(int nCode, HOOKPROC pfnFilterProc)
DWORD WINAPI GetCurrentProcessId(VOID)
HHOOK WINAPI SetWindowsHookExW(int idHook, HOOKPROC lpfn, HINSTANCE hMod, DWORD dwThreadId)
struct _NOTIFYEVENT * PNOTIFYEVENT