SPI.rar_spi_spi windows_visual c_windows s_windows spi

#define UNICODE #define _UNICODE //#include <Winsock2.h> #include <Ws2spi.h> #include <tchar.h> #include "Debug.h" #include "LSP.H" #pragma comment(lib, "Ws2_32.lib") WSPUPCALLTABLE g_pUpCallTable; // 上层函数列表。如果LSP创建了自己的伪句柄，才使用这个函数列表 WSPPROC_TABLE g_NextProcTable; // 下层函数列表 TCHAR g_szCurrentApp[MAX_PATH]; // 当前调用本DLL的程序的名称 BOOL APIENTRY DllMain( HANDLE hModule, DWORD ul_reason_for_call, LPVOID lpReserved ) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: { // 取得主模块的名称 ::GetModuleFileName(NULL, g_szCurrentApp, MAX_PATH); } break; } return TRUE; } int WSPAPI WSPStartup( WORD wVersionRequested, LPWSPDATA lpWSPData, LPWSAPROTOCOL_INFO lpProtocolInfo, WSPUPCALLTABLE UpcallTable, LPWSPPROC_TABLE lpProcTable ) { ODS1(L" WSPStartup... %s \n", g_szCurrentApp); if(lpProtocolInfo->ProtocolChain.ChainLen <= 1) { return WSAEPROVIDERFAILEDINIT; } // 保存向上调用的函数表指针（这里我们不使用它） g_pUpCallTable = UpcallTable; // 枚举协议，找到下层协议的WSAPROTOCOL_INFOW结构 WSAPROTOCOL_INFOW NextProtocolInfo; int nTotalProtos, i; LPWSAPROTOCOL_INFOW pProtoInfo = GetProvider(&nTotalProtos); // 下层入口ID DWORD dwBaseEntryId = lpProtocolInfo->ProtocolChain.ChainEntries[1]; for(i=0; i<nTotalProtos; i++) { if(pProtoInfo[i].dwCatalogEntryId == dwBaseEntryId) { memcpy(&NextProtocolInfo, &pProtoInfo[i], sizeof(NextProtocolInfo)); break; } } if(i >= nTotalProtos) { ODS(L" WSPStartup: Can not find underlying protocol \n"); return WSAEPROVIDERFAILEDINIT; } // 加载下层协议的DLL int nError; TCHAR szBaseProviderDll[MAX_PATH]; int nLen = MAX_PATH; // 取得下层提供程序DLL路径 if(::WSCGetProviderPath(&NextProtocolInfo.ProviderId, szBaseProviderDll, &nLen, &nError) == SOCKET_ERROR) { ODS1(L" WSPStartup: WSCGetProviderPath() failed %d \n", nError); return WSAEPROVIDERFAILEDINIT; } if(!::ExpandEnvironmentStrings(szBaseProviderDll, szBaseProviderDll, MAX_PATH)) { ODS1(L" WSPStartup: ExpandEnvironmentStrings() failed %d \n", ::GetLastError()); return WSAEPROVIDERFAILEDINIT; } // 加载下层提供程序 HMODULE hModule = ::LoadLibrary(szBaseProviderDll); if(hModule == NULL) { ODS1(L" WSPStartup: LoadLibrary() failed %d \n", ::GetLastError()); return WSAEPROVIDERFAILEDINIT; } // 导入下层提供程序的WSPStartup函数 LPWSPSTARTUP pfnWSPStartup = NULL; pfnWSPStartup = (LPWSPSTARTUP)::GetProcAddress(hModule, "WSPStartup"); if(pfnWSPStartup == NULL) { ODS1(L" WSPStartup: GetProcAddress() failed %d \n", ::GetLastError()); return WSAEPROVIDERFAILEDINIT; } // 调用下层提供程序的WSPStartup函数 LPWSAPROTOCOL_INFOW pInfo = lpProtocolInfo; if(NextProtocolInfo.ProtocolChain.ChainLen == BASE_PROTOCOL) { pInfo = &NextProtocolInfo; } int nRet = pfnWSPStartup(wVersionRequested, lpWSPData, pInfo, UpcallTable, lpProcTable); if(nRet != ERROR_SUCCESS) { ODS1(L" WSPStartup: underlying provider's WSPStartup() failed %d \n", nRet); return nRet; } // 保存下层提供者的函数表 g_NextProcTable = *lpProcTable; // 修改传递给上层的函数表，Hook感兴趣的函数，这里做为示例，仅Hook了WSPSendTo函数 // 您还可以Hook其它函数，如WSPSocket、WSPCloseSocket、WSPConnect等 // lpProcTable->lpWSPSendTo = WSPSendTo; // lpProcTable->lpWSPRecvFrom = WSPRecvFrom; // lpProcTable->lpWSPSend = WSPSend; lpProcTable->lpWSPRecv = WSPRecv; FreeProvider(pProtoInfo); return nRet; } LPWSAPROTOCOL_INFOW GetProvider(LPINT lpnTotalProtocols) { DWORD dwSize = 0; int nError; LPWSAPROTOCOL_INFOW pProtoInfo = NULL; // 取得需要的长度 if(::WSCEnumProtocols(NULL, pProtoInfo, &dwSize, &nError) == SOCKET_ERROR) { if(nError != WSAENOBUFS) return NULL; } pProtoInfo = (LPWSAPROTOCOL_INFOW)::GlobalAlloc(GPTR, dwSize); *lpnTotalProtocols = ::WSCEnumProtocols(NULL, pProtoInfo, &dwSize, &nError); return pProtoInfo; } void FreeProvider(LPWSAPROTOCOL_INFOW pProtoInfo) { ::GlobalFree(pProtoInfo); } /* int WSPAPI WSPRecvFrom ( SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesRecvd, LPDWORD lpFlags, struct sockaddr FAR * lpFrom, LPINT lpFromlen, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine, LPWSATHREADID lpThreadId, LPINT lpErrno ) { // 首先检查是否允许接收数据 if() { int iError; g_NextProcTable.lpWSPShutdown(s, SD_BOTH, &iError); *lpErrno = WSAECONNABORTED; ODS1(L" WSPRecvFrom deny query %s \n", g_szCurrentApp); return SOCKET_ERROR; } // 调用下层接收函数 return g_NextProcTable.lpWSPRecvFrom(s, lpBuffers, dwBufferCount, lpNumberOfBytesRecvd, lpFlags, lpFrom, lpFromlen, lpOverlapped, lpCompletionRoutine, lpThreadId, lpErrno); } int WSPAPI WSPSendTo(//发送数据的时候 SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesSent, DWORD dwFlags, const struct sockaddr FAR * lpTo, int iTolen, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine, LPWSATHREADID lpThreadId, LPINT lpErrno ) { // 拒绝所有目的端口为4567的UDP封包 SOCKADDR_IN sa = *(SOCKADDR_IN*)lpTo; if(sa.sin_port == htons(8000) ) { int iError; g_NextProcTable.lpWSPShutdown(s, SD_BOTH, &iError); *lpErrno = WSAECONNABORTED; ODS(L" deny a sendto "); return SOCKET_ERROR; } return g_NextProcTable.lpWSPSendTo(s, lpBuffers, dwBufferCount, lpNumberOfBytesSent, dwFlags, lpTo , iTolen, lpOverlapped, lpCompletionRoutine, lpThreadId, lpErrno); } int WSPAPI WSPSend( SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesSent, DWORD dwFlags, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine, LPWSATHREADID lpThreadId, LPINT lpErrno ) { // ?? 多个Buf如何处理 if (g_Acl.CheckSend(s, lpBuffers[0].buf, *lpNumberOfBytesSent) != PF_PASS) { int iError; g_NextProcTable.lpWSPShutdown(s, SD_BOTH, &iError); *lpErrno = WSAECONNABORTED; ODS(L" deny a send "); return SOCKET_ERROR; } return g_NextProcTable.lpWSPSend(s, lpBuffers, dwBufferCount, lpNumberOfBytesSent, dwFlags, lpOverlapped, lpCompletionRoutine, lpThreadId, lpErrno); } */ int WSPAPI WSPRecv( SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesRecvd, LPDWORD lpFlags, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine, LPWSATHREADID lpThreadId, LPINT lpErrno ) { if(lpOverlapped != NULL) { //lpBuffers[0].buf , *lpNumberOfBytesRecvd if(CheckRecv(s,lpBuffers,lpNumberOfBytesRecvd))//找到了的情况 { int iError; g_NextProcTable.lpWSPShutdown(s, SD_BOTH, &iError); *lpErrno = WSAECONNABORTED; return SOCKET_ERROR; } } int iRet = g_NextProcTable.lpWSPRecv(s, lpBuffers, dwBufferCount, lpNumberOfBytesRecvd, lpFlags, lpOverlapped , lpCompletionRoutine, lpThreadId, lpErrno); if(iRet != SOCKET_ERROR && lpOverlapped == NULL) { //lpBuffers[0].buf , *lpNumberOfBytesRecvd if(CheckRecv(s,lpBuffers,lpNumberOfBytesRecvd))//找到了的情况 { int iError; g_NextProcTable.lpWSPShutdown(s, SD_BOTH, &iError); *lpErrno = WSAECONNABORTED; return SOCKET_ERROR; } } return iRet; } BOOL CheckRecv(SOCKET s, LPWSABUF lpBuffers, LPDWORD lpNumberOfBytesRecvd) { static char szIndexbuf[] = "<html>"; // 查找索引字符 if(strstr(lpBuffers[0].buf, szIndexbuf) != NULL) { SOCKADDR_IN local_addr, remote_addr; int local_addr_len = sizeof(local_addr); int remote_addr_len = sizeof(remote_addr); getsockname(s, (SOCKADDR*)&local_addr, &local_addr_len); //本地信息 getpeername(s, (SOCKADDR*)&remote_ad