屏幕取词的原理和实现（Principle and Realization of screen）.doc

屏幕取词的原理和实现（Principle and Realization of screen） The mouse screen technology is widely used in the electronic dictionary, such as four, and Kingsoft software, this technique seems simple, in fact it is very complex to achieve in the windows system, in general there are two ways to achieve: The first kind: uses interception to some GDIs API modulation to realize, such as TextOut, textouta and so on. Second: make a copy of each device context (DC), and track all operations that modify the context (DC). The second method is more powerful, but compatibility is not good, and use the first method to intercept windowsAPI calls, powerful this technique may go beyond your imagination, it is no exaggeration to say that the use of windowsAPI interception technology, you can transform the entire operating system, many Chinese platform plug-in windows is in fact realized the! And this technology is the subject of this article. Cut windowsAPI calls, in particular, can be divided into two methods: The first method by direct overwrite WinAPI image in memory, embedded assembly code, which is called the jump to the address specified to intercept operation; the second method (import address table IAT to rewrite the import address table), redirect calls to the WinAPI function to achieve the WinAPI intercept. The first method is cumbersome, but also in Win95, 98 below is more difficult, this is because Microsoft said win16 API just for compatibility only retained, the programmer should be as far as possible to call the 32 bit API, in fact is not so! Most of the 32 bit 9x inside win API calls the 16 bit API of the same name after transformation, that is, we need to embed 16 bit assembler code in the intercepted function! We are going to introduce second interception methods, which are stable and compatible under Win95, 98 and nt. Due to the use of windows virtual memory management, the process of breaking the boundary wall, and inject code to the application process space PE (portable exe