c++ - 如何获取hooked winapi函数的调用后参数？

Question

对于这个例子，我说的是 Hook BeginPaint()，我 Hook 很好，我通常可以访问调用前的所有内容......

HDC WINAPI Mine_BeginPaint(HWND hWnd, LPPAINTSTRUCT lpPaint)
{


   // do stuff here, inspecting PRE-CALL lppaint struct etc...

    return fpBeginPaint(hWnd, lpPaint);


}

我正在寻找一种方法来检查这个 lpPaint 结构调用后，我该怎么做？

Answer 1

HDC WINAPI Mine_BeginPaint(HWND hWnd, LPPAINTSTRUCT lpPaint){
    // do stuff here, inspecting PRE-CALL lppaint struct etc...
    HDC result = fpBeginPaint(hWnd, lpPaint);
    //inspect here whatever you want.
    return result;
}