CN100424638C - Method for intercepting 64-bit information by using 32-bit main program in 64-bit system - Google Patents

Abstract

The invention relates to a method for intercepting 64-bit information by using a 32-bit main program in a 64-bit system, which comprises the following steps: setting 32-bit dynamic link library containing interception function and 64-bit dynamic link library containing interception function; setting a plurality of 64-bit intercepting function calling modules; setting a 64-bit interception function; generating a set of communication service program; intercepting information of all 32-bit programs running in the system through a 32-bit interception function, and intercepting information of all 64-bit programs running in the system through a 64-bit interception function; sending information for removing the 32-bit interception function and the 64-bit interception function; and the 32-bit main program removes the 32-bit intercept function while removing the 64-bit intercept function. The invention can correctly run on a 64-bit system adopted by the server by using the existing 32-bit main program, and intercepts 64-bit information by a 64-bit interception function.

Description

The method of using 32-bit main program to intercept 64-bit information in 64-bit system

technical field

The invention relates to a method for intercepting information by a 32-bit main program, in particular to a method for intercepting 64-bit information by using a 32-bit main program in a 64-bit system.

Background technique

At present, when realizing the remote control of the remote server, its core technology is the interception function operation mechanism used in the remote control of the server using the Windows system (Windows Server), which is also the method adopted by most similar software on the market , the principle is to use the comprehensive interception function in the system to intercept all the information in the system, and then transmit the image to the client (Client) by analyzing the type of information and the range that needs to be updated, and then the client displays the corresponding image in the local window superior. The advantage of this method is that the graphics transmitted each time are the graphics that need to update the area, rather than all the desktop images, which reduces the pressure of network transmission to a certain extent and improves the transmission speed.

However, when the server adopts a 64-bit system, but the main program is 32-bit, a problem occurs in the above method. The 32-bit interception function in the 32-bit main program cannot intercept the 64-bit information of the 64-bit program running in the 64-bit system of the server. Then the client cannot obtain the required updated data, such as information about the mouse, etc.

After research, it is found that the 32-bit interception function running in the 32-bit main program can only intercept the information of the 32-bit program running on the 64-bit system, but cannot successfully intercept the information of the 64-bit program running on the 64-bit system; while the 64-bit interception function It can intercept the information of 64-bit programs running on 64-bit systems, but cannot successfully intercept the information of 32-bit programs running on 64-bit systems. Therefore, if the 32-bit main program used by the server wants to intercept all information of the server operating program using a 64-bit system, it cannot only use the 32-bit interception function or the 64-bit interception function.

Contents of the invention

The technical problem to be solved by the present invention is to provide a method for intercepting 64-bit information by using a 32-bit main program in a 64-bit system, so that the 32-bit main program running in a server of the 64-bit system can intercept all information of the system.

In order to achieve the above object, the present invention provides a method for utilizing a 32-bit main program to intercept 64-bit information in a 64-bit system, which is characterized in that the method comprises the following steps:

(1) 32-bit DLLs containing interception functions and 64-bit DLLs containing interception functions are set;

(2) multiple 64-bit interception function calling modules are set;

(3) a 32 is set as an interception function and a 64-bit interception function;

(4) Intercept information of all 32-bit programs running in the system through the 32-bit interception function, and intercept information of all 64-bit programs running in the system through the 64-bit interception function;

(5) Generate a socket communication service program;

(6) sending information to remove the 32-bit interception function and the 64-bit interception function; and

(7) The 32-bit main program removes the 32-bit interception function, and simultaneously removes the 64-bit interception function.

The above-mentioned method for intercepting 64-bit information by using a 32-bit main program in a 64-bit system is characterized in that the 64-bit interception function is set after the 32-bit interception function.

The above-mentioned method for intercepting 64-bit information using a 32-bit main program in a 64-bit system is characterized in that the 64-bit interception function is a comprehensive interception function, which is set in the 64-bit dynamic link library containing the interception function.

The above-mentioned method for intercepting 64-bit information using a 32-bit main program in a 64-bit system is characterized in that the calling module of the 64-bit interception function is a background program for setting the 64-bit interception function.

The above-mentioned method for utilizing 32-bit main programs to intercept 64-bit information in a 64-bit system is characterized in that the calling module of each 64-bit interception function calls a plurality of entry functions in the dynamic link program library of the 64-bit interception function, And pass the parameters provided to the 64-bit interception function through the entry function, so as to set the 64-bit interception function.

The above-mentioned method for intercepting 64-bit information using a 32-bit main program in a 64-bit system is characterized in that it also includes the following steps:

When the 32-bit main program removes the 32-bit interception function, send the information of removing the 64-bit interception function to the calling module of the 64-bit interception function through the socket communication service program;

When the calling module of the 64-bit interception function receives the information of removing the 64-bit interception function, the calling module of the 64-bit interception function calls the entry function, and removes the 64-bit interception function; and

Send the information that the 64-bit interception function has been removed to the 32-bit main program.

The effect of the present invention is that the amount of modification to the existing 32-bit main program is small, basically the 32-bit main program running on the server using the 32-bit operating system has little change, and there is no need to recompile it into a 64-bit system. program of. The original 32-bit interception function part does not need to do any action. Namely: use the existing 32-bit main program to run correctly on the 64-bit system adopted by the server, and intercept 64-bit information through the 64-bit interception function.

By adopting the method of the present invention, it can be applied to all relevant programs using the interception function mechanism on the 64-bit Windows system, and at the same time, the use of such programs on the 32-bit system will not be affected.

The present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments, but not as a limitation of the present invention.

Description of drawings

Fig. 1 is the system block diagram of 64-bit Windows system of the present invention;

Fig. 2 is the method flowchart of intercepting 64-bit information in the 32-bit main program of the present invention;

Fig. 3 is the method flowchart of removing 64 interception functions of the present invention; And

Fig. 4 is a flow chart of the method for using a 64-bit interception function in a 32-bit main program in the present invention.

Among them, reference signs:

100 32-bit main program

220 32-bit dynamic link library containing interception functions

310 64-bit interception function call module

320 64-bit dynamic link library containing interception functions

Step 101 is provided with 32-bit DLLs containing interception functions and 64-bit DLLs containing interception functions

Step 102 Set multiple calling modules of 64-bit interception functions

Step 103 Set up 64-bit interception function

Step 104 The 32-bit interception function intercepts the information of all 32-bit programs running in the system, and the 64-bit interception function intercepts the information of all 64-bit programs running in the system

Step 105 Generate a set of communication service program

Step 106 Determine whether to send the message of removing the interception function

Step 107 Remove the 32-bit interception function from the 32-bit main program, and remove the 64-bit interception function at the same time

Step 201 Set the 64-bit dynamic link library containing the interception function, set the 64-bit interception function, and set the interception function

Step 202 Generate a set of communication service program

Step 203 Determine whether the socket communication service program sends information to remove the 64-bit interception function

Step 204 Call the interception function program entry function, remove the interception function, and send reply data

Step 301 Set a plurality of 32-bit dynamic link libraries that contain interception functions, set 32-bit interception functions, and set the interception function

Step 302 Generate a set of communication service program

Step 303 Set a plurality of 64-bit dynamic link libraries that contain interception functions, set 64-bit interception functions, and set this interception function

Step 304 Process the information sent by the 32-bit interception function and the 64-bit interception function

Step 305 Determine whether to send the information to remove the 32-bit interception function

Step 306 Remove the 32-bit interception function

Step 307 Connect to the socket communication service program, and determine whether to send the information for removing the 64-bit interception function

Step 308 Remove the 64-bit interception function

Detailed ways

Please refer to Fig. 1, the system block diagram of 64-bit Windows system of the present invention is shown in the figure, comprise: 32-bit main program 100; Remove, and this 32-bit dynamic link library 220 that contains the interception function sends the 32-bit information intercepted to the above-mentioned 32-bit main program 100; the 64-bit interception function call module 310 is set or moved by the above-mentioned 32-bit main program In addition, it is used to set or remove the 64-bit dynamic link library containing the interception function; the 64-bit dynamic link library 320 including the interception function sends the intercepted 64-bit information to the above-mentioned 32-bit main program 100 .

The 64-bit interception function call module 310 is a background program, which only plays the role of setting a 64-bit interception function. The parameters that need to be provided to the interception function can be passed to this program by command mode, and thus the program is running. Call the entry function in the 64-bit dynamic link program library 320 containing the interception function, so as to set the 64-bit interception function.

Because the interception function is applied comprehensively, the comprehensive interception function must be set in the dynamic link program library, so a 64-bit dynamic link program library 320 containing the interception function is required. The 64-bit interception function is basically the same as the 32-bit program interception program. The function is the same, but compiled into an executable program on a 64-bit platform. Both the 32-bit interception function and the 64-bit interception function accomplish the same job, that is, the intercepted information is sent to the 32-bit main program 100, and the main program processes it uniformly. The difference is that the 64-bit interception function can detect 64 32-bit information, the 32-bit interception function can detect 32-bit information.

The original 32-bit main program 100 is still compiled according to 32-bit, and the part that needs to be modified is to add the process of setting the above-mentioned 64-bit interception function calling module 310 at the place where the 32-bit dynamic link library 220 containing the interception function was called before. Once the 64-bit interception function is set, the 64-bit interception function call module 310 has no specific meaning. When the 32-bit interception function is removed in the 32-bit main program 100, the 64-bit interception function will also be removed.

In an embodiment of the present invention, the 64-bit interception function is removed by socket (socket) communication service program, please refer to Fig. 3 now, this figure is the method flowchart of removing 64-bit interception function of the present invention, as shown in the figure , the method for removing the 64-bit interception function of the present invention comprises the following steps: step 201, setting a 64-bit dynamic link library that contains the interception function, setting the 64-bit interception function, and setting the interception function; step 202, generating a set of Connect the communication service program; Step 203, judge whether the socket communication service program sends information to remove the 64-bit interception function; Step 204, when sending this removal information, call the interception function program entry function, remove the interception function, and send Reply data; if the removal information is not issued, the 64-bit interception function has been waiting for the removal information.

In an embodiment of the present invention, the function of the 32-bit main program 100 is to provide services to the client, so that the client can completely control the computer where the server is located. Along with the continuous upgrading of various computer hardware and software and the appearance of 64-bit processors, so Microsoft has also released its 64-bit operating system. Technology.

As shown in Figure 2, this figure is a flow chart of the method for intercepting 64-bit information in the 32-bit main program of the present invention, comprising the following steps:

Step 101, setting 32-bit DLLs containing interception functions and 64-bit DLLs containing interception functions, this step is used to set 64-bit interception functions, that is: multiple entry functions are provided for setting multiple A 64-bit interception function can intercept all information of all 64-bit programs running on the system and uninstall the 64-bit interception function. The information intercepted by the 64-bit interception function will be converted into the area range data to be updated on the screen as needed, and sent to the 32-bit Main program is processed; Step 102, the calling module of a plurality of 64 interception functions is set, at first analyze the command line parameter when system calls 64 interception functions, obtain entry address, in order to call the function that 64 interception functions are set; Step 103 , the 64-bit interception function is set; Step 104, intercept the information of all 32-bit programs running in the system by the 32-bit interception function, and intercept the information of all 64-bit programs running in the system by the 64-bit interception function; Step 105, generate a The socket communication service program is used to monitor a certain port. Once a user connects, it will collect the received data and judge its data content. If it is the pre-agreed data, it means that the 32-bit main program needs to remove the interception function program , then send the removal interception function information to the 32-bit main program; step 106, judge whether to send the information of removing the 32-bit interception function; step 107, when sending the removal information, the 32-bit main program removes the 32-bit interception function function, remove the 64-bit interception function, if the removal information is not issued, the 32-bit interception function has been waiting for the removal information to be issued.

Since the 32-bit main program 100 has already set the 32-bit interception function when needed, such as when a client connects, all that needs to be done is to set the 64-bit interception function after the 32-bit interception function is set, and set the required command parameters as well. After setting, the number of command lines is the window handle of the agreed 32-bit main program 100 to receive information, etc. Once executed, the 64-bit interception function can start to work, and the 32-bit main program can receive the 64-bit dynamic link program containing the interception function Information sent by library 320.

When the client disconnects, or in some other cases, the server needs to remove the interception function, so the program generates a socket communication service program, which is used to connect to the server generated during the operation of the interception function, and transmit the information to the server. Wait for the information returned from the server, and then you can officially confirm that the interception function has been removed.

Its flow chart is as shown in Figure 4, and this figure is the method flow chart of using 64 interception functions in 32 main programs of the present invention, comprises: step 301, a plurality of 32 dynamic link program libraries that comprise interception functions are set , set the 32-bit interception function, and set the interception function; step 302, generate a set of communication service program; step 303, set a plurality of 64-bit dynamic link libraries that contain the interception function, set the 64-bit interception function, and set This interception function; step 304, process the information sent by 32-bit interception functions and 64-bit interception functions; step 305, judge whether the 32-bit main program sends information to remove 32-bit interception functions; step 306, when sending this removal information , remove the 32-bit interception function; if the removal information is not sent, the 32-bit interception function waits for the removal information to be issued; step 307, judge whether the socket communication service program sends the information to remove the 64-bit interception function; step 308. When the removal information is issued, the 64-bit interception function is removed. If the removal information is not issued, the 64-bit interception function waits for the removal information to be issued.

Certainly, the present invention also can have other multiple embodiments, without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and deformations according to the present invention, but these corresponding changes All changes and modifications should belong to the protection scope of the claims of the present invention.

Claims (6)

1. method of utilizing 64 information of 32 master routines interception in 64 systems is characterized in that the method includes the steps of:

(1) the dynamic link routine library of tackling function 32 comprise and 64 s' the dynamic link routine library of tackling function that comprises is set;

(2) a plurality of 64 interception function calls modules are set;

(3) one 32 interception functions and one 64 interception functions are set;

(4) by these 32 information of tackling all 32 programs of moving in the intercepting api calls system, and by these 64 information of tackling all 64 programs of moving in the intercepting api calls system;

(5) produce a socket communication service program;

(6) send the information that removes these 32 interception functions and these 64 interception functions; And

(7) these 32 master routines remove these 32 interception functions, remove these 64 interception functions simultaneously.

2. the method for utilizing 64 information of 32 master routine interceptions in 64 systems according to claim 1 is characterized in that these 64 interception function setup are after 32 interception functions.

3. the method for utilizing 64 information of 32 master routines interception in 64 systems according to claim 1 is characterized in that, these 64 interception functions are comprehensively to tackle function, and it comprises in the dynamic link routine library of tackling function at these 64 and is provided with.

4. the method for utilizing 64 information of 32 master routine interceptions in 64 systems according to claim 1 is characterized in that, these 64 interception function calls modules are background program, are used to be provided with these 64 interception functions.

5. the method for in 64 systems, utilizing 64 information of 32 master routine interceptions according to claim 4, it is characterized in that, a plurality of entrance functions in the dynamic link routine library of these 64 interceptions of described each 64 interception function calls module invokes function, and by this entrance function transmission provide to these 64 the interception function parameters, be provided with these 64 the interception functions.

6. the method for utilizing 64 information of 32 master routine interceptions in 64 systems according to claim 5 is characterized in that, also comprises following steps:

When these 32 master routines remove these 32 interception functions, send the information that removes these 64 interception functions by this socket communication service program and tackle the function calls modules to these 64;

When these 64 interception function calls modules were received the information that removes these 64 interception functions, these 64 these entrance functions of interception function calls module invokes removed these 64 interception functions; And

Send the information that these 64 interception functions have removed to these 32 master routines.

Images