能够通过API实现“把外部程序的RichTextBox控件，当做自己的内部控件一样的进行控制吗？” 100分求解

[sakura2005]

我做的一个小程序，已经用API查找到了外部程序（如：写字版）的RichTextBox控件的句柄（hwnd），现在想用我的程序向这个RichTextBox发送如下的两条信息，实现查找和替换的功能：

　　SendMessage　hwnd, EM_FINDTEXTEX, FR_DOWN, fText
　　SendMessage　hwnd, EM_REPLACESEL, 0, ByVal FindAndReplace.TextReplace.Text
（PS：上述语句在对自己程序内部的RichTextBox使用时，正常通过）

　　可是每次实验都会发生Windows报错，然后自动关闭“写字版”（或VB），后来，我查了一下资料，这应该是XP和2000等系统对程序的一种保护措施，看了网上的资料，说是用“共享文件”来做，可是看了一下，我觉得“共享文件”好象是把自己程序的内存进行共享，然后供其它的程序去控制，而不是把已经运行的某一个程序进行共享，让自己控制（可能我的理解有误　^-^ ）　。
　　那么，能够通过API实现“把外部程序的RichTextBox控件，当做自己的内部控件一样的进行控制吗？”要如何做呢？？

[northwolves]

看看有没有帮助：
http://www.vbaccelerator.com/home/VB/Utilities/ActiveX_Documenter/ActiveX_Documenter_Source_zip_VBRichEdit_ctl.asp

http://www.vbaccelerator.com/home/VB/Utilities/ActiveX_Documenter/ActiveX_Documenter_Source_zip_mRichEdit_bas.asp

[rainstormmaster]

//在 WinNT 里用 VirtualAllocEx 来在目标进程里分配内存，然后把地址传给控件。
在 Win9x 里可以用文件映射来获得共享内存。

就是这个意思，在WinNT下要用WriteProcessMemory和ReadProcessMemory读写内存，而在Win9x则要用copymemory，总之很麻烦就是了

给你个模块，内存分配的：
Option Explicit
'=========Checking OS staff=============
Private Type OSVERSIONINFO
dwOSVersionInfoSize As Long
dwMajorVersion As Long
dwMinorVersion As Long
dwBuildNumber As Long
dwPlatformId As Long
szCSDVersion As String * 128
End Type
Private Declare Function GetVersionEx Lib "kernel32" Alias "GetVersionExA" (LpVersionInformation As OSVERSIONINFO) As Long

'========= Win95/98/ME Shared memory staff===============
Private Declare Function CreateFileMapping Lib "kernel32" Alias "CreateFileMappingA" (ByVal hFile As Long, ByVal lpFileMappigAttributes As Long, ByVal flProtect As Long, ByVal dwMaximumSizeHigh As Long, ByVal dwMaximumSizeLow As Long, ByVal lpName As String) As Long
Private Declare Function MapViewOfFile Lib "kernel32" (ByVal hFileMappingObject As Long, ByVal dwDesiredAccess As Long, ByVal dwFileOffsetHigh As Long, ByVal dwFileOffsetLow As Long, ByVal dwNumberOfBytesToMap As Long) As Long
Private Declare Function UnmapViewOfFile Lib "kernel32" (lpBaseAddress As Any) As Long
Const STANDARD_RIGHTS_REQUIRED = &HF0000
Const SECTION_QUERY = &H1
Const SECTION_MAP_WRITE = &H2
Const SECTION_MAP_READ = &H4
Const SECTION_MAP_EXECUTE = &H8
Const SECTION_EXTEND_SIZE = &H10
Const SECTION_ALL_ACCESS = STANDARD_RIGHTS_REQUIRED Or SECTION_QUERY Or SECTION_MAP_WRITE Or SECTION_MAP_READ Or SECTION_MAP_EXECUTE Or SECTION_EXTEND_SIZE
Const FILE_MAP_ALL_ACCESS = SECTION_ALL_ACCESS

Private Const PAGE_NOACCESS = &H1&
Private Const PAGE_READONLY = &H2&
Private Const PAGE_READWRITE = &H4&
Private Const PAGE_WRITECOPY = &H8&
Private Const PAGE_EXECUTE = &H10&
Private Const PAGE_EXECUTE_READ = &H20&
Private Const PAGE_EXECUTE_READWRITE = &H40&
Private Const PAGE_EXECUTE_WRITECOPY = &H80&
Private Const PAGE_GUARD = &H100&
Private Const PAGE_NOCACHE = &H200&

'============NT Shared memory staff======================
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Const PROCESS_VM_OPERATION = &H8
Const PROCESS_VM_READ = &H10
Const PROCESS_VM_WRITE = &H20
Const PROCESS_ALL_ACCESS = 0

Const MEM_COMMIT = &H1000
Const MEM_RESERVE = &H2000
Const MEM_DECOMMIT = &H4000
Const MEM_RELEASE = &H8000
Const MEM_FREE = &H10000
Const MEM_PRIVATE = &H20000
Const MEM_MAPPED = &H40000
Const MEM_TOP_DOWN = &H100000

Private Declare Function VirtualAllocEx Lib "kernel32" (ByVal hProcess As Long, ByVal lpAddress As Long, ByVal dwSize As Long, ByVal flAllocationType As Long, ByVal flProtect As Long) As Long
Private Declare Function VirtualFreeEx Lib "kernel32" (ByVal hProcess As Long, lpAddress As Any, ByVal dwSize As Long, ByVal dwFreeType As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long

Public Function GetMemShared95(ByVal memSize As Long, hFile As Long) As Long
hFile = CreateFileMapping(&HFFFFFFFF, 0, PAGE_READWRITE, 0, memSize, vbNullString)
GetMemShared95 = MapViewOfFile(hFile, FILE_MAP_ALL_ACCESS, 0, 0, 0)
End Function

Public Sub FreeMemShared95(ByVal hFile As Long, ByVal lpMem As Long)
UnmapViewOfFile lpMem
CloseHandle hFile
End Sub

Public Function GetMemSharedNT(ByVal pid As Long, ByVal memSize As Long, hProcess As Long) As Long
hProcess = OpenProcess(PROCESS_VM_OPERATION Or PROCESS_VM_READ Or PROCESS_VM_WRITE, False, pid)
GetMemSharedNT = VirtualAllocEx(ByVal hProcess, ByVal 0&, ByVal memSize, MEM_RESERVE Or MEM_COMMIT, PAGE_READWRITE)
End Function

Public Sub FreeMemSharedNT(ByVal hProcess As Long, ByVal MemAddress As Long, ByVal memSize As Long)
Call VirtualFreeEx(hProcess, ByVal MemAddress, memSize, MEM_RELEASE)
CloseHandle hProcess
End Sub

Public Function IsWindowsNT() As Boolean
Dim verinfo As OSVERSIONINFO
verinfo.dwOSVersionInfoSize = Len(verinfo)
If (GetVersionEx(verinfo)) = 0 Then Exit Function
If verinfo.dwPlatformId = 2 Then IsWindowsNT = True
End Function

[蒋晟]

要注入代码到对方进程。你传递的本进程内的内存地址在对方进程内是无效地址。

[James0001]

绿豆好像有类似的代码
在 WinNT 里用 VirtualAllocEx 来在目标进程里分配内存，然后把地址传给控件。
在 Win9x 里可以用文件映射来获得共享内存。

[daisy8675]

2个字,很难

而且对方不一定是richtextbox控件

不要把一切理解成为控件,而是com

[dongle2001]

VC里有个Attach函数可以通过句柄得到对象指针，不知vb有没有类似的函数，如果有那就不用麻烦了

[zyl910]

RichTextBox是Win32新控件，不是传统的Wiundows3.0控件，所以Windows系统不会自动为它处理跨进程请求

在Win9X下，可以使用文件映射来实现跨进程分配内存
在WinNT下，可以调用VirtualAllocEx跨进程分配内存
请参考：
http://www.hosp.ncku.edu.tw/~cww/html/q00549.html

[kmlxk0]

爽，northwolves(狼行天下) 给的是不是无控件使用RichTextBox，收藏～

[迈克揉索芙特]

进程注入

[VampireB]

“进程注入”，要怎么作啊？！，小弟，刚学不久，很多都不懂啊！