该例的钩子都是写在一个DLL中的,和应用程序独立开来的全局钩子。
一般情况下,如果要截获鼠标和普通按键,刚可以用下边的方法
鼠标:
1
2
3
4
5
6
7
8
|
LRESULT CALLBACK
MouseProc( int nCode,
//
hook code WPARAM wParam,
//
message identifier LPARAM lParam
//
mouse coordinates ) { return TRUE; } |
键盘:
1
2
3
4
5
6
7
8
|
LRESULT CALLBACK
KeyboardProc( int code,
//
hook code WPARAM wParam,
//
virtual-key code LPARAM lParam
//
keystroke-message information ) { return TRUE; } |
上边这个键盘钩子只能截获普通键,像WIN键、CTRL+ESC什么的是截获不了的,如果要截获这些比较牛的功能键及组合键,那就要用低级键盘钩子了
低级键盘钩子:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
LRESULT CALLBACK
LowLevelKeyboardProc( int nCode, WPARAM wParam, LPARAM lParam ) { if (nCode==HC_ACTION) { KBDLLHOOKSTRUCT
*kblp=(KBDLLHOOKSTRUCT*)lParam; BOOL bCtrlKeyDown
= GetAsyncKeyState(VK_CONTROL)>>(( sizeof ( SHORT )
* 8) - 1); if ((kblp->vkCode==VK_ESCAPE
&& bCtrlKeyDown) || //
Ctrl+Esc //
Alt+TAB (kblp->vkCode==VK_TAB
&& kblp->flags & LLKHF_ALTDOWN) || //
Alt+Esc (kblp->vkCode==VK_ESCAPE
&& kblp->flags & LLKHF_ALTDOWN)|| (kblp->vkCode==VK_LWIN
|| kblp->vkCode==VK_RWIN)) { return TRUE;
//
不再往CallNextHookEx传递,直接返回 } } return CallNextHookEx(g_KeyBoardHook,
nCode, wParam, lParam); } |
然后通过下边的方法安装和卸载钩子:
1
2
3
4
5
6
7
8
9
10
11
12
13
|
VOID __stdcall
InstallHookEv() { //g_KeyBoardHook
= SetWindowsHookEx(WH_KEYBOARD, (HOOKPROC)KeyboardProc, theApp.m_hInstance, 0); g_LowKeyBoardHook
= SetWindowsHookEx(WH_KEYBOARD_LL, (HOOKPROC)LowLevelKeyboardProc, theApp.m_hInstance, 0); g_MouseHook
= SetWindowsHookEx(WH_MOUSE, (HOOKPROC)MouseProc, theApp.m_hInstance, 0); } VOID __stdcall
UninstallHookEv() { //UnhookWindowsHookEx(g_KeyBoardHook); UnhookWindowsHookEx(g_LowKeyBoardHook); UnhookWindowsHookEx(g_MouseHook); } |
这些方法中带"g_"的变量都是定义在DLL中这些方法所在的.cpp文件最上边的
1
2
3
|
HHOOK g_KeyBoardHook
= NULL; HHOOK g_LowKeyBoardHook
= NULL; HHOOK g_MouseHook
= NULL; |