钩子教程 - 原理(六) : WH_JOURNALPLAYBACK / WH_JOURNALRECORD / WH_KEYBOARD_LL / WH_KEYBOARD / WH_MOUSE_LL / ...

最新推荐文章于 2021-01-13 15:44:03 发布

weixin_30725467

最新推荐文章于 2021-01-13 15:44:03 发布

阅读量821

点赞数

原文链接：http://www.cnblogs.com/DuanLaoYe/p/5501350.html

版权

本文详细介绍了Windows系统中的多种钩子类型及其用途，包括用于回放记录的WH_JOURNALRECORD和WH_JOURNALPLAYBACK，用于键盘和鼠标输入监控的WH_KEYBOARD_LL及WH_MOUSE_LL等。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

原文地址:http://www.zdexe.com/program/201004/580.html

钩子类型7：WH_JOURNALPLAYBACK

The WH_JOURNALPLAYBACK hook enables an application to insert messages into the system message queue. You can use this hook to play back a series of mouse and keyboard events recorded earlier by using the WH_JOURNALRECORD Hook. Regular mouse and keyboard input is disabled as long as a WH_JOURNALPLAYBACK hook is installed. A WH_JOURNALPLAYBACK hook is a global hook — it cannot be used as a thread-specific hook.

The WH_JOURNALPLAYBACK hook returns a time-out value. This value tells the system how many milliseconds to wait before processing the current message from the playback hook. This enables the hook to control the timing of the events it plays back.

WH_JOURNALPLAYBACK钩子允许应用程序将消息插入到系统消息队列中。使用该钩子回放先前使用WH_JOURNALRECORD 钩子记录的一系列鼠标和键盘事件。在WH_JOURNALPLAYBACK被安装后，常规的鼠标和键盘输入被禁用。WH_JOURNALPLAYBACK钩子是全局钩子，不能被用作线程钩子。WH_JOURNALPLAYBACK钩子返回一个超时值。该值告诉系统在处理来自回放钩子的当前消息之前等待了多少毫秒。这允许该钩子控制回放事件的速度。

----------------------------------------------------------------------------------------------------------------------------------------------------

钩子类型8：WH_JOURNALRECORD

The WH_JOURNALRECORD hook enables you to monitor and record input events. Typically, you use this hook to record a sequence of mouse and keyboard events to play back later by using the WH_JOURNALPLAYBACK Hook. The WH_JOURNALRECORD hook is a global hook — it cannot be used as a thread-specific hook.

WH_JOURNALRECORD钩子允许监视并且记录输入事件。典型的，使用该钩子来记录顺序的的鼠标和键盘事件，以后可以使用WH_JOURNALPLAYBACK.钩子进行回放。该钩子是全局钩子，不能被用作进程钩子。

----------------------------------------------------------------------------------------------------------------------------------------------------

钩子类型9：WH_KEYBOARD_LL

The WH_KEYBOARD_LL hook enables you to monitor keyboard input events about to be posted in a thread input queue.

WH_KEYBOARD_LL钩子监视在线程输入队列中，即将被传递的键盘输入事件。

----------------------------------------------------------------------------------------------------------------------------------------------------

钩子类型10：WH_KEYBOARD

The WH_KEYBOARD hook enables an application to monitor message traffic for WM_KEYDOWN and WM_KEYUP messages about to be returned by the GetMessage or PeekMessage function. You can use the WH_KEYBOARD hook to monitor keyboard input posted to a message queue.

WH_KEYBOARD钩子允许应用程序监视即将被GetMessage 或者PeekMessage方法返回的WM_KEYDOWN 或者 WM_KEYUP消息。使用WH_KEYBOARD钩子可以监视传递到消息队列中的键盘输入。

----------------------------------------------------------------------------------------------------------------------------------------------------

钩子类型11：WH_MOUSE_LL

The WH_MOUSE_LL hook enables you to monitor mouse input events about to be posted in a thread input queue.

WH_MOUSE_LL钩子监视在线程输入队列中，即将被传递的鼠标输入事件。

----------------------------------------------------------------------------------------------------------------------------------------------------

钩子类型12：WH_MOUSE

The WH_MOUSE hook enables you to monitor mouse messages about to be returned by the GetMessage or PeekMessage function. You can use the WH_MOUSE hook to monitor mouse input posted to a message queue.

WH_MOUSE钩子允许监视即将被GetMessage或者 PeekMessage方法返回的鼠标消息。使用该钩子监视传递到线程输入队列的鼠标输入。

转载于:https://www.cnblogs.com/DuanLaoYe/p/5501350.html