AutoHotkey Community

majkinetor · Joined: 24 May 2006 Posts: 3615 Location: Belgrade

I will try to find time to check out if I can find what causes the problems you mention above in you SetWindowsHookEx project. I also had similar bugs in my projects back in days. I remember that I was using other hook types in some ocasions just to enable some other hook. For instance, hook OBJECT CREATE just to hook OBJECT MOVING as for some reason 1st hook was always injected while other one wasn't... Well, the point was to enter the process address space anyway, one way or another.
_________________

Sean · Joined: 12 Feb 2007 Posts: 1281

JGR · Posted: Tue May 22, 2007 6:31 am Post subject:

Process explorer thinks that anything which doesn't set up a stack frame is "packed".

As for PostMessage, I can't remember why I finally used it rather than SendMessage... I believe it was to prevent AHK deadlocking the system.

As for the hook's return value, it just calls the next hook function and returns that.

I planned at one point to call SendMessage, and only call the next hook function, if the return value was greater than 1.
I will probably implement this later today...

majkinetor · Joined: 24 May 2006 Posts: 3615 Location: Belgrade

Sean · Joined: 12 Feb 2007 Posts: 1281

Sean · Joined: 12 Feb 2007 Posts: 1281

JGR · Posted: Tue May 22, 2007 2:55 pm Post subject:

I am going to investigate this acgenral.dll file.

I found this blog by Alex Ionescu...
http://www.alex-ionescu.com/?p=40

Good work working that out, Thanks...

JGR

Edit:
Renaming notepad.exe also works...
There is probably an entry for notepad in the system compatibility database.
I will look and try and find it.

majkinetor · Joined: 24 May 2006 Posts: 3615 Location: Belgrade

Great discovery guys.... Very Happy

I am geting ready for real hooks Very Happy

In the meantime I improved docking. It was slow cuz of SetWinDelay which defaults to 100ms.

Now dock even with WinEvent hooks works fine.
_________________

JGR · Posted: Tue May 22, 2007 4:11 pm Post subject:

There is an entry in C:\windows\AppPatch\sysmain.sdb for notepad, but I can't extract what it means or if we can get rid of it...

JGR

majkinetor · Joined: 24 May 2006 Posts: 3615 Location: Belgrade

JGR · Posted: Tue May 22, 2007 4:28 pm Post subject:

That hook dll hooks low level mouse events.
This is the same hook that autohotkey uses internally...
The hook dll is only mapped into the process which calls it, not all processes which need to be hooked.

Low level mouse events are not specific to a process...
This is useful, but not the same type of hook (although my hook dll will quite happily hook low level mouse events) as a global CBT hook.

I have recently updated the code to use send instead of post message, and to call the next hook function only if the return value is not zero or one, signaling a definite allow or block respectively.
The link will be reposted here: http://www.autohotkey.net/~JGR/cbthook.rar

Sean · Joined: 12 Feb 2007 Posts: 1281

JGR · Posted: Wed May 23, 2007 9:04 am Post subject:

I have done the same thing to callback.dll and reuploaded the archive...
It is now 1024 bytes, and does not import ExitProcess, I could not determine whether this works any better in my five minutes of testing it, but it is only really going to be loaded into autohotkey's process anyway.

I verified that the new hook dll works properly on all processes, I suspect it has more to do that I switched linker from an OMF to a COFF one and reduced the number of sections from 5 to 2.
(I personally prefer OMF for assembly, but the linkers are a bit basic... )

JGR