是系统范围钩子
什么是钩子(Hook)
钩子(Hook)是windows提供种消息处理机制平台是指在正常运行中接受信息的前预先启动用来检查和修改传给该信息(钩子)实际上是个处理消息段通过系统把它挂入系统每当特定消息发出在没有到达目窗口前钩子就先捕获该消息亦即钩子先得到控制权这时钩子即可以加工处理(改变)该消息也可以不作处理而继续传递该消息还可以强制结束消息传递注意:安装钩子将会影响系统性能监测“系统范围事件”系统钩子特别明显系统在处理所有相关事件时都将您钩子这样您系统将会明显减慢所以应谨慎使用用完后立即卸载还有由于您可以预先截获其它进程消息所以旦您钩子出了问题话必将影响其它进程
钩子作用范围
共有两种范围(类型)钩子局部和远程局部钩子仅钩挂自己进程事件远程钩子还可以将钩挂其它进程发生事件远程钩子又有两种: 基于线程钩子将捕获其它进程中某特定线程事件简言的就是可以用来观察其它进程中某特定线程将发生事件系统范围钩子将捕捉系统中所有进程将发生事件消息
Hook 类型
windows共有14种Hooks每种类型Hook可以使应用能够监视区别类型系统消息处理机制下面描述所有可以利用Hook类型发生时机详细内容可以查阅MSDN这里只介绍我们将要用到两种类型钩子
(1)WH_KEYBOARD_LL Hook
WH_KEYBOARD_LL Hook监视输入到线程消息队列中键盘消息
(2)WH_MOUSE_LL Hook
WH_MOUSE_LL Hook监视输入到线程消息队列中鼠标消息
下面 把 API 封装起来以便
1// NativeMethods.cs
2using system;
3using system.Runtime.InteropServices;
4using system.Drawing;
5
6 CnBlogs.Youzai.ScreenKeyboard {
7 [StructLayout(LayoutKind.Sequential)]
8 ernal struct MOUSEINPUT {
9 public dx;
10 public dy;
11 public mouseData;
12 public dwFlags;
13 public time;
14 public IntPtr dwExtraInfo;
15 }
16
17 [StructLayout(LayoutKind.Sequential)]
18 ernal struct KEYBDINPUT {
19 public wVk;
20 public wScan;
21 public dwFlags;
22 public time;
23 public IntPtr dwExtraInfo;
24 }
25
26 [StructLayout(LayoutKind.Explicit)]
27 ernal struct Input {
28 [FieldOff(0)]
29 public type;
30 [FieldOff(4)]
31 public MOUSEINPUT mi;
32 [FieldOff(4)]
33 public KEYBDINPUT ki;
34 [FieldOff(4)]
35 public HARDWAREINPUT hi;
36 }
37
38 [StructLayout(LayoutKind.Sequential)]
39 ernal struct HARDWAREINPUT {
40 public uMsg;
41 public wParamL;
42 public wParamH;
43 }
44
45 ernal INPUT {
46 public const MOUSE = 0;
47 public const KEYBOARD = 1;
48 public const HARDWARE = 2;
49 }
50
51 ernal NativeMethods {
52 [DllImport("User32.dll", CharSet = CharSet.Auto, SetLastError = false)]
53 ernal extern IntPtr GetWindowLong(IntPtr hWnd, nIndex);
54
55 [DllImport("User32.dll", CharSet = CharSet.Auto, SetLastError = false)]
56 ernal extern IntPtr SetWindowLong(IntPtr hWnd, nIndex, dwNewLong);
57
58 [DllImport("User32.dll", EntryPo = "SendInput", CharSet = CharSet.Auto)]
59 ernal extern UInt32 SendInput(UInt32 nInputs, Input pInputs, Int32 cbSize);
60
61 [DllImport("Kernel32.dll", EntryPo = "GetTickCount", CharSet = CharSet.Auto)]
62 ernal extern GetTickCount;
63
64 [DllImport("User32.dll", EntryPo = "GetKeyState", CharSet = CharSet.Auto)]
65 ernal extern GetKeyState( nVirtKey);
66
67 [DllImport("User32.dll", EntryPo = "SendMessage", CharSet = CharSet.Auto)]
68 ernal extern IntPtr SendMessage(IntPtr hWnd, msg, IntPtr wParam,
IntPtr lParam);
69 }
70}
安装钩子
使用SetWindowsHookEx(API)指定个Hook类型、自己Hook过程是全局还是局部Hook同时给出Hook过程进入点就可以轻松安装自己Hook过程SetWindowsHookEx总是将你Hook放置在Hook链顶端你可以使用CallNextHookEx将系统消息传递给Hook链中下个
对于某些类型Hook系统将向该类所有Hook发送消息这时Hook中CallNextHookEx语句将被忽略全局(远程钩子)Hook可以拦截系统中所有线程某个特定消息为了安装个全局Hook过程必须在应用外建立个DLL并将该Hook封装到其中 应用在安装全局Hook过程时必须先得到该DLL模块句柄将Dll名传递给LoadLibrary 就会得到该DLL模块句柄;得到该句柄 后使用GetProcAddress可以得到Hook过程地址最后使用SetWindowsHookEx将 Hook过程首址嵌入相应Hook链中SetWindowsHookEx传递个模块句柄它为Hook过程进入点线程标识符置为0该Hook过程同系统中所有线程关联如果是安装局部Hook此时该Hook可以放置在DLL中也可以放置在应用模块段在C#中通过平台(前文已经介绍过)来API
1 public void Start(bool MouseHook, bool KeyboardHook) {
2 (hMouseHook IntPtr.Zero && MouseHook) {
3 MouseHookProcedure = HookProc(MouseHookProc);
4 hMouseHook = SetWindowsHookEx(
5 WH_MOUSE_LL,
6 MouseHookProcedure,
7 Marshal.GetHINSTANCE(
8 Assembly.GetExecutingAssembly.GetModules[0]),
9 0
10 );
11
12 (hMouseHook IntPtr.Zero) {
13 errorCode = Marshal.GetLastWin32Error;
14 Stop(true, false, false);
15
16 throw Win32Exception(errorCode);
17 }
18 }
19
20 (hKeyboardHook IntPtr.Zero && KeyboardHook) {
21 KeyboardHookProcedure = HookProc(KeyboardHookProc);
22 // hook
23 hKeyboardHook = SetWindowsHookEx(
24 WH_KEYBOARD_LL,
25 KeyboardHookProcedure,
26 Marshal.GetHINSTANCE(
27 Assembly.GetExecutingAssembly.GetModules[0]),
28 0);
29 // If SetWindowsHookEx fails.
30 (hKeyboardHook IntPtr.Zero) {
31 // Returns the error code ed by the last
32 // unmanaged function called using platform invoke
33 // that has the DllImportAttribute.SetLastError flag .
34 errorCode = Marshal.GetLastWin32Error;
35 //do cleanup
36 Stop(false, true, false);
37 //Initializes and throws a instance of the
38 // Win32Exception with the specied error.
39 throw Win32Exception(errorCode);
40 }
41 }
42 }
使用完钩子后要进行卸载这个可以写在析构中
1
2 public void Stop {
3 this.Stop(true, true, true);
4 }
5
6 public void Stop(bool unMouseHook, bool unKeyboardHook,
7 bool throwExceptions) {
8 // mouse hook and must be uned
9 (hMouseHook != IntPtr.Zero && unMouseHook) {
10 // un hook
11 bool retMouse = UnhookWindowsHookEx(hMouseHook);
12 // re invalid handle
13 hMouseHook = IntPtr.Zero;
14 // failed and exception must be thrown
15 (retMouse false && throwExceptions) {
16 // Returns the error code ed by the last unmanaged function
17 // called using platform invoke that has the DllImportAttribute.
18 // SetLastError flag .
19 errorCode = Marshal.GetLastWin32Error;
20 // Initializes and throws a instance of the Win32Exception
21 // with the specied error.
22 throw Win32Exception(errorCode);
23 }
24 }
25
26 // keyboard hook and must be uned
27 (hKeyboardHook != IntPtr.Zero && unKeyboardHook) {
28 // un hook
29 bool retKeyboard = UnhookWindowsHookEx(hKeyboardHook);
30 // re invalid handle
31 hKeyboardHook = IntPtr.Zero;
32 // failed and exception must be thrown
33 (retKeyboard false && throwExceptions) {
34 // Returns the error code ed by the last unmanaged function
35 // called using platform invoke that has the DllImportAttribute.
36 // SetLastError flag .
37 errorCode = Marshal.GetLastWin32Error;
38 // Initializes and throws a instance of the Win32Exception
39 // with the specied error.
40 throw Win32Exception(errorCode);
41 }
42 }
43 }
44
将这个文件编译成个dll即可在应用中通过它提供事件便可监听所有键盘事件
但是这只能监听键盘事件没有键盘情况下如何会有键盘事件?其实很简单通过SendInput
API提供虚拟键盘代码即可模拟键盘输入下面代码模拟个 KeyDown 和 KeyUp 过程
把他们连接起来就是次按键过程
1 private void SendKeyDown( key) {
2 Input input = Input[1];
3 input[0].type = INPUT.KEYBOARD;
4 input[0].ki.wVk = key;
5 input[0].ki.time = NativeMethods.GetTickCount;
6
7 (NativeMethods.SendInput((u)input.Length, input, Marshal.SizeOf(input[0]))
8 < input.Length) {
9 throw Win32Exception(Marshal.GetLastWin32Error);
10 }
11 }
12
13 private void SendKeyUp( key) {
14 Input input = Input[1];
15 input[0].type = INPUT.KEYBOARD;
16 input[0].ki.wVk = key;
17 input[0].ki.dwFlags = KeyboardConsta.KEYEVENTF_KEYUP;
18 input[0].ki.time = NativeMethods.GetTickCount;
19
20 (NativeMethods.SendInput((u)input.Length, input, Marshal.SizeOf(input[0]))
21 < input.Length) {
22 throw Win32Exception(Marshal.GetLastWin32Error);
23 }
24 }
自己实现个 KeyBoardButton Control控件用作按钮用 Visual Studio 或者 SharpDevelop 为屏幕键盘设计 UI然后
在这些 Button Click 事件里面模拟个按键过程
1
2 private void ButtonOnClick(object sender, EventArgs e) {
3 KeyboardButton btnKey = sender as KeyboardButton;
4 (btnKey null) {
5 ;
6 }
7
8 SendKeyCommand(btnKey);
9 }
10
11 private void SendKeyCommand(KeyboardButton keyButton) {
12 key = keyButton.VKCode;
13 (combinationVKButtonsMap.ContainsKey(key)) {
14 (keyButton.Checked) {
15 SendKeyUp(key);
16 } {
17 SendKeyDown(key);
18 }
19 } {
20 SendKeyDown(key);
21 SendKeyUp(key);
22 }
23 }
其中 combinationVKButtonsMap 是个 IDictionary>, key 存储是VK_SHIFT, VK_CONTROL 等组合键键盘码左右两个按钮对应同个键盘码因此需要放在个 List 里
标准键盘上每个键都有虚拟键码( VK_CODE)和的对应还有些其他常量
把它写在个静态 里吧
1 // KeyboardConsta.cs
2 ernal KeyboardConsta {
3 ernal readonly VK_F1 = 0x70;
4 ernal readonly VK_F2 = 0x71;
5 ernal readonly VK_F3 = 0x72;
6 ernal readonly VK_F4 = 0x73;
7 ernal readonly VK_F5 = 0x74;
8 ernal readonly VK_F6 = 0x75;
9 ernal readonly VK_F7 = 0x76;
10 ernal readonly VK_F8 = 0x77;
11 ernal readonly VK_F9 = 0x78;
12 ernal readonly VK_F10 = 0x79;
13 ernal readonly VK_F11 = 0x7A;
14 ernal readonly VK_F12 = 0x7B;
15
16 ernal readonly VK_LEFT = 0x25;
17 ernal readonly VK_UP = 0x26;
18 ernal readonly VK_RIGHT = 0x27;
19 ernal readonly VK_DOWN = 0x28;
20
21 ernal readonly VK_NONE = 0x00;
22 ernal readonly VK_ESCAPE = 0x1B;
23 ernal readonly VK_EXECUTE = 0x2B;
24 ernal readonly VK_CANCEL = 0x03;
25 ernal readonly VK_RETURN = 0x0D;
26 ernal readonly VK_ACCEPT = 0x1E;
27 ernal readonly VK_BACK = 0x08;
28 ernal readonly VK_TAB = 0x09;
29 ernal readonly VK_DELETE = 0x2E;
30 ernal readonly VK_CAPITAL = 0x14;
31 ernal readonly VK_NUMLOCK = 0x90;
32 ernal readonly VK_SPACE = 0x20;
33 ernal readonly VK_DECIMAL = 0x6E;
34 ernal readonly VK_SUBTRACT = 0x6D;
35
36 ernal readonly VK_ADD = 0x6B;
37 ernal readonly VK_DIVIDE = 0x6F;
38 ernal readonly VK_MULTIPLY = 0x6A;
39 ernal readonly VK_INSERT = 0x2D;
40
41 ernal readonly VK_OEM_1 = 0xBA; // ';:' for US
42 ernal readonly VK_OEM_PLUS = 0xBB; // '+' any country
43
44 ernal readonly VK_OEM_MINUS = 0xBD; // '-' any country
45
46 ernal readonly VK_OEM_2 = 0xBF; // '/?' for US
47 ernal readonly VK_OEM_3 = 0xC0; // '`~' for US
48 ernal readonly VK_OEM_4 = 0xDB; // '[{' for US
49 ernal readonly VK_OEM_5 = 0xDC; // '|' for US
50 ernal readonly VK_OEM_6 = 0xDD; // ']}' for US
51 ernal readonly VK_OEM_7 = 0xDE; // ''"' for US
52 ernal readonly VK_OEM_PERIOD = 0xBE; // '.>' any country
53 ernal readonly VK_OEM_COMMA = 0xBC; // ',<' any country
54 ernal readonly VK_SHIFT = 0x10;
55 ernal readonly VK_CONTROL = 0x11;
56 ernal readonly VK_MENU = 0x12;
57 ernal readonly VK_LWIN = 0x5B;
58 ernal readonly VK_RWIN = 0x5C;
59 ernal readonly VK_APPS = 0x5D;
60
61 ernal readonly VK_LSHIFT = 0xA0;
62 ernal readonly VK_RSHIFT = 0xA1;
63 ernal readonly VK_LCONTROL = 0xA2;
64 ernal readonly VK_RCONTROL = 0xA3;
65 ernal readonly VK_LMENU = 0xA4;
66 ernal readonly VK_RMENU = 0xA5;
67
68 ernal readonly VK_SNAPSHOT = 0x2C;
69 ernal readonly VK_SCROLL = 0x91;
70 ernal readonly VK_PAUSE = 0x13;
71 ernal readonly VK_HOME = 0x24;
72
73 ernal readonly VK_NEXT = 0x22;
74 ernal readonly VK_PRIOR = 0x21;
75 ernal readonly VK_END = 0x23;
76
77 ernal readonly VK_NUMPAD0 = 0x60;
78 ernal readonly VK_NUMPAD1 = 0x61;
79 ernal readonly VK_NUMPAD2 = 0x62;
80 ernal readonly VK_NUMPAD3 = 0x63;
81 ernal readonly VK_NUMPAD4 = 0x64;
82 ernal readonly VK_NUMPAD5 = 0x65;
83 ernal readonly VK_NUMPAD5NOTHING = 0x0C;
84 ernal readonly VK_NUMPAD6 = 0x66;
85 ernal readonly VK_NUMPAD7 = 0x67;
86 ernal readonly VK_NUMPAD8 = 0x68;
87 ernal readonly VK_NUMPAD9 = 0x69;
88
89 ernal readonly KEYEVENTF_EXTENDEDKEY = 0x0001;
90 ernal readonly KEYEVENTF_KEYUP = 0x0002;
91
92 ernal readonly GWL_EXSTYLE = -20;
93 ernal readonly WS_DISABLED = 0X8000000;
94 ernal readonly WM_SETFOCUS = 0X0007;
95 }
屏幕键盘必须是个不能获得输入焦点窗体在这个窗体构造里可以安装
个全局鼠标钩子再通过 SetWindowLong API 完成
1UserActivityHook hook = UserActivityHook(true, true);
2hook.MouseActivity HookOnMouseActivity;
3
4private void HookOnMouseActivity(object sener, HookEx.MouseExEventArgs e) {
5 Po location = e.Location;
6
7 (e.Button MouseButtons.Left) {
8 Rectangle captionRect = Rectangle(this.Location, Size(this.Width,
9 Information.CaptionHeight));
10 (captionRect.Contains(location)) {
11 NativeMethods.SetWindowLong(this.Handle, KeyboardConsta.GWL_EXSTYLE,
12 ()NativeMethods.GetWindowLong(this.Handle, KeyboardConsta.GWL_EXSTYLE)
13 & (~KeyboardConsta.WS_DISABLED));
14 NativeMethods.SendMessage(this.Handle, KeyboardConsta.WM_SETFOCUS, IntPtr.Zero,
IntPtr.Zero);
15 } {
16 NativeMethods.SetWindowLong(this.Handle, KeyboardConsta.GWL_EXSTYLE,
17 ()NativeMethods.GetWindowLong(this.Handle, KeyboardConsta.GWL_EXSTYLE) |
18 KeyboardConsta.WS_DISABLED);
19 }
20 }
21}
鼠标单击标题栏让屏幕键盘可以接收焦点并激活单击其他部分则不激活窗体(如果激活了其他必然取消激活输入就无法进行了)这样才可以进行输入并且保证了可以拖动窗体到其他位置
至此个屏幕键盘差不多完成了能够实现和实际键盘完全同步至于窗体按键重绘以及 Num Lock Caps LockScroll Lock 等键盘灯模拟这里就不讲了如果有兴趣可以下载完整代码
介绍说明:本参考了 Jeffrey Richter 先生著作 CLR via C# Second Edition MSDN 以及些网络资料
这是微软技术贯特点使用简单但是如果要深入话还是要投入不少精力
最新评论