使用注入的DLL从外部应用程序渲染OpenGL场景内部

时间:2014-01-25 08:38:21

标签: c++ windows opengl hook

我已经能够将DLL注入到应用程序中,例如键盘操作,但是如何挂钩到OpenGL程序并绘制它?我已经阅读了许多“教程”和答案,但他们都概述了这样做的想法,而不是如何实际做到这一点。如果有人能指出我正确的方向,我会非常感激。

我打算做的是能够从RAM中的第三方应用程序(注入的dll)绘制叠加(或者可能在实际场景中绘制?这可能吗?)。我对OpenGL的唯一体验是通过GLUT,但我愿意学习,如果需要的话。

经过数小时的研究,我找到了一个开源应用程序,它可以做我想要的,并查看其代码,但似乎无法找到正在挂钩的方法或ASM代码如何在那个具体的方法。

在注入dll时是否定义了要挂钩的方法,或者在附加dll时是否执行此操作?根据我的理解,你可以做任何一个,但是一个比另一个好吗?

我正在寻找一个全面的教程,或者这样一个简单的例子。如果有人能指出我正确的方向,那就太好了!

1 个答案:

答案 0 :(得分:6)

要理解的最关键的一步是,OpenGL是基于状态的绘图API,而不是场景图。因此,您不能假设有一些场景可以添加一些叠加。相反,你必须找到一个点,你知道你注入的程序已经完成了绘图,你可以在上绘制你的叠加层

对于双缓冲窗口,很容易识别这一点:在基于X11的系统上调用wglSwapBuffers(或glXSwapBuffers,对于基于EGL的系统调用eglSwapBuffers - Windows不使用它们)

所以你要做的就是挂钩调用SwapBuffers。您将该调用重定向到您的叠加图代码。

由于OpenGL是基于状态的,因此您应该避免弄乱您所连接的程序的上下文。没问题,您可以根据需要创建任意数量的OpenGL上下文,并在同一个drawable中使用它们。所以你的钩子SwapBuffers看起来像这样:

BOOL WINAPI (*host_SwapBuffers)(HDC);
HGLRC hook_last_rc_created = NULL; /* for context sharing */

/* C++ std::map for the lazy. */
std::map<int, HGLRC> hook_pixelformat_to_rc;

/* This function is called to setup per RC resources, i.e. things
 * that are not shared through the list namespace, like FBOs, VAOs
 * and such. */
void init_RC();

/* This function is called when the first hook OpenGL context is
 * created. This is to be used for one time initialization of OpenGL
 * objects that are shared among all contexts through the list namespace,
 * like textures, VBOs, PBOs and such. */
void init_GL();

/* The function that does the actual overlay drawing.
 * Must not call SwapBuffers when finished. The draw overlay has to set
 * up the viewport, projection and modelview transformations.
 *
 * rect gives the dimensions of the window we draw to, for
 * setting the viewport and stuff like that. */
void draw_overlay(RECT const *rect);

BOOL WINAPI hook_SwapBuffers(HDC dc)
{
    /* It's illegal to call SwapBuffers with a NULL dc. To keep Windows
     * error behavior we bail out, forwarding the call to the system
     * SwapBuffers if dc == NULL */
    if( !dc ) {
        goto terminate;
    }

    /* OpenGL RCs can be shared between DCs of compatible pixelformat. So technically
     * any number of pixelformat IDs could be compatible. But we just assume that
     * compatibility is only between pixelformats of the same ID, which is safe. */
    int const pixelformat = GetPixelFormat(dc);

    HGLRC hook_rc;
    /* we need to create a RC for our hook only one time and can reuse that
     * later. It can even be used for different DCs or windows, as long as
     * they have been created with compatible pixel formats. To make this
     * hook really robust there is to be a mapping from DCs to pixelformat IDs.
     * If no RC can be found for the given pixelformat, create one. */
    if( 0 == hook_pixelformat_to_rc.count(pixelformat) ) {
        /* the DC is of a window that already got everything set up for OpenGL.
         * All we have to do is create our own HRC if we don't have one already. */

        hook_rc = wglCreateContext(dc);
        if( !hook_rc ) {
            /* bail out, but forward the SwapBuffers call on error. Don't use
             * exceptions in hook DLLs, or very bad things may happen, if you're
             * not very, very careful. */
            goto terminate;
        }

        /* This could throw an exception... */
        hook_pixelformat_to_rc[pixelformat] = hook_rc;
        init_RC();

        /* If there was a RC created before, share its list namespace, so
         * that textures, VBOs, PBOs and so on are available among all the
         * contexts our hook uses. */
        if( hook_last_rc_created ) {
            wglShareLists(hook_last_rc_created, hook_rc);
        }
        else {
            init_GL();
        }
        hook_last_rc_created = hook_rc;
    }
    else {
        hook_rc = hook_pixelformat_to_rc[pixelformat];
    }

    /* Preserve the RC bound to the window before our hook.
     * May be NULL, but that's fine, this just means there was nothing
     * bound and we should return to that state at the end. */
    HGLRC const host_rc = wglGetCurrentContext();

    /* Find out which window the DC belongs to, so that we can query for its
     * dimension, which we need to properly setup a viewport region. */
    HWND const wnd = WindowFromDC(dc);
    RECT wnd_rect;
    GetClientRect(wnd, &wnd_rect);

    /* bind our own RC */
    wglMakeCurrent(dc, hook_rc);

    /* we can now draw the overlay */
    draw_overlay(&wnd_rect);

    /* Restore RC to DC binding */
    wglMakeCurrent(dc, host_rc);
terminate:
    /* host_SwapBuffers is a function pointer initialized to the address of the
     * system SwapBuffers function before hooking by the DLL injection code. */
    return host_SwapBuffers(hdc);
}