C# 全局钩子 方法二

最新推荐文章于 2024-04-10 18:44:23 发布
最新推荐文章于 2024-04-10 18:44:23 发布
阅读量220 收藏
点赞数
文章标签： runtime c#

//网上都说，我的朋友也说C#不能实现全局钩子获得listView之类的消息，只能实现全局的键盘和鼠标钩子，下面代码是在做得到其它程序的listView控件中的列表写的，不过没实现，项目只做了一半放下了，改其它方法实现了，本代码只供参考学习，如果哪位高手朋友做出来了，请把代码发一下，本人会非常感谢，再感谢的！！

using System;
using System.Collections.Generic;

using System.Text;
using System.Runtime.InteropServices;
using System.Reflection;
using System.Diagnostics;

namespace AnShieldClassLibrary
{

//public struct tagCWPSTRUCT
//{
// public IntPtr lParam;// 消息参数
// public IntPtr wParam;// 消息参数
// public int message;// 消息值，由非负整数来表示
// public IntPtr hwnd;// 消息的目的地句柄
//}

[StructLayout(LayoutKind.Sequential)]
public struct tagCWPSTRUCT
{
public IntPtr lParam;// 消息参数
public IntPtr wParam;// 消息参数
public int message;// 消息值，由非负整数来表示
public IntPtr hwnd;// 消息的目的地句柄

//public IntPtr lparam;
//public IntPtr wparam;
//public int message;
//public IntPtr hwnd;
//以前的
//public int message;
//public int paramL;
//public int paramH;
//public int Time;
//public int hwnd;
}
//消息结构体
[StructLayout(LayoutKind.Sequential)]
public struct LVITEM
{
public int mask;
public int iItem;
public int iSubItem;
public int state;
public int stateMask;
public string pszText; // string
public int cchTextMax;
public int iImage;
public IntPtr lParam;
public int iIndent;
public int iGroupId;
public int cColumns;
public IntPtr puColumns;
}
//不用钩子得到窗口消息
[StructLayout(LayoutKind.Sequential)]
public struct CwpStruct
{
public IntPtr lparam;
public IntPtr wparam;
public int message;
public IntPtr hwnd;
}
[StructLayout(LayoutKind.Sequential)]
public struct DebugStruct
{
IntPtr idThread;
IntPtr idThreadInstaller;
IntPtr lParam;
IntPtr wParam;
int code;
}
[StructLayout(LayoutKind.Sequential)]
public struct EventMsg
{
public int message;
public int paramL;
public int paramH;
public int Time;
public IntPtr hwnd;
}

public class WanGuaClass
{

static int Lvm_First = 0x0000f;
static int warningHook = 0;//句柄
string strBarCode = "";

public const int OPEN_PROCESS_ALL = 2035711;
public const int PAGE_READWRITE = 4;
public const int PROCESS_CREATE_THREAD = 2;
public const int PROCESS_HEAP_ENTRY_BUSY = 4;
public const int PROCESS_VM_OPERATION = 8;
public const int PROCESS_VM_READ = 256;
public const int PROCESS_VM_WRITE = 32;

private const int PAGE_EXECUTE_READWRITE = 0x4;
private const int MEM_COMMIT = 4096;
private const int MEM_RELEASE = 0x8000;
private const int MEM_DECOMMIT = 0x4000;
private const int PROCESS_ALL_ACCESS = 0x1F0FFF;

//查找窗体
[DllImport("user32.dll", EntryPoint = "FindWindow", CharSet = CharSet.Auto)]
public extern static IntPtr FindWindow(string lpClassName, string lpWindowName);
[DllImport("User32.dll", EntryPoint = "FindWindowEx", CharSet = CharSet.Auto)]
public static extern IntPtr FindWindowEx(IntPtr hwndParent, IntPtr hwndChildAfter, string lpClassName, string lpWindowName);

//将指定的消息发送到一个或多个窗口
[DllImport("user32.dll", EntryPoint = "SendMessage")]
public static extern int SendMessage(IntPtr hwnd, int wMsg, int wParam, int lParam);
[DllImport("user32.dll",EntryPoint="SendMessage")]
public static extern IntPtr SendMessage(IntPtr hWnd, UInt32 Msg, IntPtr wParam, [MarshalAs(UnmanagedType.LPStr)] string lParam);

//发送后等待处理完才返回
[DllImport("User32.dll", EntryPoint = "SendMessage")]
public static extern int SendMessage(IntPtr wnd, int msg, IntPtr wP, IntPtr lP);
[DllImport("User32.dll", EntryPoint = "PostMessage")]
public static extern int PostMessage(IntPtr wnd, int msg, IntPtr wP, IntPtr lP);//发送完不管结果就返回
[DllImport("User32.dll", EntryPoint = "SetForegroundWindow")]//激活窗口
public static extern int SetForegroundWindow(IntPtr hwnd);


//得到目标进程句柄的函数
[DllImport("User32.DLL")]
public extern static int GetWindowThreadProcessId(int hwnd, ref IntPtr lpdwProcessId);
[DllImport("User32.DLL")]
public extern static int GetWindowThreadProcessId(IntPtr hwnd, ref IntPtr lpdwProcessId);

//打开进程
[DllImport("kernel32.dll")]
public extern static int OpenProcess(int dwDesiredAccess,int bInheritHandle,int dwProcessId);
[DllImport("kernel32.dll")]
public extern static IntPtr OpenProcess( uint dwDesiredAccess,int bInheritHandle, uint dwProcessId);

//关闭句柄的函数
[DllImport("kernel32.dll", EntryPoint = "CloseHandle")]
public static extern int CloseHandle(int hObject);

//获取消息
[DllImport("user32", EntryPoint = "GetMessage")]
public static extern int GetMessage(out CwpStruct lpMsg, IntPtr hwnd, int wMsgFilterMin, int wMsgFilterMax);

//读内存
[DllImport("Kernel32.dll ")]
public static extern Int32 ReadProcessMemory(IntPtr hProcess,IntPtr lpBaseAddress,[In, Out] byte[] buffer, int size,out IntPtr lpNumberOfBytesWritten);
[DllImport("Kernel32.dll ")]
public static extern Int32 ReadProcessMemory( int hProcess, int lpBaseAddress,ref int buffer,int size,int lpNumberOfBytesWritten);
[DllImport("Kernel32.dll ")]
public static extern Int32 ReadProcessMemory(int hProcess, int lpBaseAddress, byte[] buffer, int size, int lpNumberOfBytesWritten );

//写内存
[DllImport("kernel32.dll")]
public static extern Int32 WriteProcessMemory(IntPtr hProcess,IntPtr lpBaseAddress,[In, Out] byte[] buffer, int size, out IntPtr lpNumberOfBytesWritten );

[DllImport("kernel32.dll")]
public static extern Int32 WriteProcessMemory(int hProcess, int lpBaseAddress, byte[] buffer,int size,int lpNumberOfBytesWritten );

//创建线程
[DllImport("kernel32", EntryPoint = "CreateRemoteThread")]
public static extern int CreateRemoteThread(int hProcess, int lpThreadAttributes,int dwStackSize, int lpStartAddress, int lpParameter,int dwCreationFlags, ref int lpThreadId);

//开辟指定进程的内存空间
[DllImport("Kernel32.dll")]
public static extern System.Int32 VirtualAllocEx(System.IntPtr hProcess,System.Int32 lpAddress,System.Int32 dwSize,System.Int16 flAllocationType, System.Int16 flProtect );

[DllImport("Kernel32.dll")]
public static extern System.Int32 VirtualAllocEx( int hProcess,int lpAddress,int dwSize, int flAllocationType,int flProtect);

//弹窗口
[DllImport("user32.dll")]
public static extern int MessageBoxA(int h, string m, string c, int type);

//释放内存空间
[DllImport("Kernel32.dll")]
public static extern System.Int32 VirtualFreeEx(int hProcess,int lpAddress,int dwSize,int flAllocationType);

// 安装钩子
[DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
private static extern int SetWindowsHookEx(int idHook, HookProc lpfn, IntPtr hInstance, int threadId);
// 卸载钩子
[DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
private static extern bool UnhookWindowsHookEx(int idHook);
// 继续下一个钩子
[DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
private static extern int CallNextHookEx(int idHook, int nCode, Int32 wParam, IntPtr lParam);

//当前模块句柄：GetModuleHandle(Process.GetCurrentProcess().MainModule.ModuleName)
[DllImport("kernel32.dll")]
public static extern IntPtr GetModuleHandle(string name);

//声明定义回调函数
delegate int HookProc(int nCode, Int32 wParam, IntPtr lParam);

//CwpStruct cwpStruct = new CwpStruct();
//static int LVM_FIRST = 0x1000;
//static int LVM_INSERTITEMA = LVM_FIRST + 7;
//static int LVM_SETITEMTEXT = LVM_FIRST + 46;
//
public const int WH_CALLWNDPROC = 4; //mouse hook constant
public const int LVM_FIRST = 0x1000;
public const int LVM_INSERTITEM = LVM_FIRST + 7;//1列
public const int LVM_INSERTITEMW = LVM_FIRST + 77;//1列
public const int LVM_SETITEMTEXT = LVM_FIRST + 46;//2列
public const int LVM_SETITEMTEXTW = LVM_FIRST + 116;//2列
HookProc MouseHookProcedure; //Declare MouseHookProcedure as HookProc type.
/// <summary>
/// 委托
/// </summary>
/// <param name="nCode">钩子类型</param>
/// <param name="wParam"></param>
/// <param name="lParam"></param>
/// <returns></returns>
public int WarningMsg(int nCode, Int32 wParam, IntPtr lParam)
{
tagCWPSTRUCT lp = (tagCWPSTRUCT)Marshal.PtrToStructure(lParam, typeof(tagCWPSTRUCT));

if (lp.message == LVM_INSERTITEM || lp.message == LVM_INSERTITEMW)
{

MessageBoxA(0, "范围是A!", "描述", 0);

}
else if (lp.message == LVM_SETITEMTEXT || lp.message == LVM_SETITEMTEXTW)
{
MessageBoxA(0, "范围是B!", "描述", 0);

}

//tagCWPSTRUCT msg = (tagCWPSTRUCT)Marshal.PtrToStructure((IntPtr)lParam, typeof(tagCWPSTRUCT));
//if (msg.message == LVM_SETITEMTEXT)
//{
// MessageBoxA(0, "取数据成功!", "描述", 0);
//}
//try
{

/*
tagCWPSTRUCT msg = (tagCWPSTRUCT)Marshal.PtrToStructure(lParam, typeof(tagCWPSTRUCT));
IntPtr loginHwnd = AnShieldClassLibrary.WanGuaClass.FindWindow(null, "MyList"); //找到窗口句柄
IntPtr ListHwnd = IntPtr.Zero;
IntPtr listThreadId =IntPtr .Zero;

if (loginHwnd != IntPtr.Zero)
{
ListHwnd = AnShieldClassLibrary.WanGuaClass.FindWindowEx(loginHwnd, IntPtr.Zero, "SysListView32", null);//列表句柄
GetWindowThreadProcessId(ListHwnd, ref listThreadId);

// tagCWPSTRUCT msg = (tagCWPSTRUCT)Marshal.PtrToStructure(lParam, typeof(tagCWPSTRUCT));

//if (msg.message == LVM_FIRST)
//{
// //LVITEM pLvitem = (LVITEM)cwpStruct;
// //MessageBoxA(0, "取数据成功!", "描述", 0);
//}
//if (msg.message == LVM_SETITEMTEXT)
//{
// MessageBoxA(0, "取数据成功!", "描述", 0);
//}

if (msg.hwnd == ListHwnd)
{

内容
if (msg.message == Lvm_First)
{
MessageBoxA(0, "消息取得成功!", "描述", 0);

}
else
{
MessageBoxA(0, "成功!", "描述", 0);

}
}
else
{

MessageBoxA(0, "消息取得成功!", "描述", 0);MessageBoxA(0, "目标线程："+listThreadId+";;loginHwnd:" + loginHwnd + " message:" + msg.message + " hwnd:" + msg.hwnd +" msg"+msg+ " (nCode:"+nCode+" wParam:"+wParam+" LParam:"+lParam+")", "描述", 0);

}
}
* */
//return CallNextHookEx(warningHook, nCode, wParam, lParam);
}
//catch ( Exception ex) {
//MessageBoxA(0, ex.ToString(), "错误信息", 0);
return CallNextHookEx(warningHook, nCode, wParam, lParam);
//}
}




// 安装钩子
public int Start()
{

if (warningHook == 0)
{
//IntPtr loginHwnd = AnShieldClassLibrary.WanGuaClass.FindWindow(null, "MyList"); //找到窗口句柄
//if (loginHwnd != IntPtr.Zero)
{
//IntPtr ListHwnd = AnShieldClassLibrary.WanGuaClass.FindWindowEx(loginHwnd, IntPtr.Zero, "SysListView32", null);//列表句柄
// if (ListHwnd != IntPtr.Zero)
{
//WH_CALLWNDPROC = 4
IntPtr lockHwnd = Marshal.GetHINSTANCE(Assembly.GetExecutingAssembly().GetModules()[0]);
warningHook = SetWindowsHookEx(4, new HookProc(WarningMsg), lockHwnd, 0);// // 安装钩子
//warningHook = SetWindowsHookEx(4, new HookProc(WarningMsg), GetModuleHandle(Process.GetCurrentProcess().MainModule.ModuleName), 0);
}

}


}

return warningHook;
}

// 卸载钩子
public bool Stop()
{
bool b = false;
if (warningHook != 0)
{
b= UnhookWindowsHookEx(warningHook);
}
return b;
}
}
}

//网上都说，我的朋友也说C#不能实现全局钩子获得listView之类的消息，只能实现全局的键盘和鼠标钩子，上面代码是在做得到其它程序的listView控件中的列表写的，不过没实现，项目只做了一半放下了，改其它方法实现了，本代码只供参考学习，如果哪位高手朋友做出来了，请把代码发一下，本人会非常感谢，再感谢的！！

iteye_11495
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
C# 读取其他程序 SysListView32 实例
NewSpring的空间
06-07 2458
windows任务管理中，我的系统是win10，详细信息和服务都用到了SysListView32，网上找都是贴部分代码，没有一个能直接跑的，找到个C++也是半成品的，在C++中一番折腾搞通了，现将C++的翻译为了C#版本。 C#可以调用win32对SysListView32实现读取，效果如下 C#的实现相对于C++来说，还是复杂了些，因为过程中全部是win32，C++可以直接调用，下面看看C#怎么实现的 代码就不详细贴出来了，本来直接准备了工程下载，Vs2019的，代码中每句都有注释，如.
ListView Messages (LVM_)ListView控件类的消息常量常量
11-04
ListView Messages (LVM_)ListView控件类的消息常量常量
在VS2010上使用C#调用非托管C++生成的DLL文件（图文讲解）
weixin_34259232的博客
03-31 283
背景       在项目过程中，有时候你需要调用非C#编写的DLL文件，尤其在使用一些第三方通讯组件的时候，通过C#来开发应用软件时，就需要利用DllImport特性进行方法调用。本篇文章将引导你快速理解这个调用的过程。   步骤 1. 创建一个CSharpInvokeCPP的解决方案：   2. 创建一个C++的动态库项目：   3. 在应用程序设置中，选择“DLL”，其...
C# 全局键盘钩子的简单实现
weixin_43152819的博客
03-08 678
WPF的全局键盘钩子，自己实现的代码
C# 实现全局鼠标钩子操作以及发送键盘事件
csdn2990的博客
06-19 1581
【代码】C# 实现全局鼠标钩子操作以及发送键盘事件。
c#全局钩子现实
01-24
2. 创建钩子：使用`DllImport`特性引入Windows API，如`SetWindowsHookEx`函数，用于安装全局钩子。这个函数需要传入钩子类型（例如WH_KEYBOARD_LL表示低级键盘钩子）、钩子处理程序（我们的回调函数）、线程ID...
C#全局钩子屏蔽键盘按键Demo
08-11
本项目“C#全局钩子屏蔽键盘按键Demo”就是利用C#编程语言实现的一个实例，能够有效地屏蔽键盘按键以及特定的组合键，如Alt+F4。 1. **C#编程语言**：C#是由微软开发的一种面向对象的编程语言，广泛用于Windows桌面...
c# 全局钩子 (实例)
03-07
c# 全局钩子之键盘(实例) 内含键盘钩子+ 鼠标钩子
C#全局钩子的使用
12-15
C#中使用全局钩子对键盘鼠标的拦截
C#使用全局钩子(hook)，SetWindowsHookEx返回0、不回调的解决
LYBWWP
11-14 1704
在.net 2005平台下 在使用全局hook时，总是遇见SetWindowsHookEx的返回值为0，而且在： DllImport的SetLastError选项 = true的时候，调用Marshal.GetLastWin32Error() 也返回0，那么就看看是否这个原因：因为VS的调试模式的问题。 1.试试禁用宿主进程能否解决： 1). 在 Visual Studio 中打开项
C#全局钩子，简单版-该文章当笔记
最新发布
qq_41171367的博客
04-10 253
【代码】C#全局钩子，简单版-该文章当笔记。
C# 全局钩子，方法一
LYBWWP
11-18 3684
using System; using System.Collections.Generic; using System.ComponentModel; using System.Data; using System.Text; using System.Runtime.InteropServices; using System.Reflection; namespace XCo
SendMessage用法
javahigh1
04-24 1849
函数功能：该函数将指定的消息发送到一个或多个窗口。此函数为指定的窗口调用窗口程序，直到窗口程序处理完消息再返回。该函数是应用程序和应用程序之间进行消息传递的主要手段之一。函数原型：LRESULT SendMessage（HWND hWnd，UINT Msg，WPARAM wParam，LPARAM IParam）；参数：hWnd：其窗口程序将接收消息的窗口的句柄。如果此参数为HWND_BROADC...
C# 中[DllImport("user32.dll")]和extern用法和示例
热门推荐
甫子陵的博客
05-06 1万+
       原文：https://blog.csdn.net/michellehsiao/article/details/7629746        extern 修饰符用于声明在外部实现的方法。extern 修饰符的常见用法是在使用 Interop 服务调入非托管代码时与DllImport 特性一起使用。在这种情况下，还必须将方法声明为static，如下示例所示：[DllImport("us...
user32 sendmessage
qq_35893094的博客
01-08 1664
using System; using System.Collections.Generic; using System.ComponentModel; using System.Data; using System.Drawing; using System.Linq; using System.Text; using System.Windows.Forms; using Sy
C#使用Windows全局钩子(Winform) SetWindowsHookEx
WOLWW的博客
04-28 1779
winform使用全局钩子 Hook
C#全局钩子使用
mango_city的博客
11-07 3388
最近遇到了一个需要处理键盘按键释放消息的问题，我在使用重写ProcessCmdKey之后，发现其无法响应KeyUp消息，不知是被什么东西拦截了，查阅了网上的一些资料，使用全局钩子解决了这个问题，在此把过程记录下来。 首先，在使用钩子前我们先来了解一下要使用到的API函数。 第一步：声明API //安装钩子 [DllImport("user32.dll", Ch...
抓取WINDOWS窗口
qq_35353325的博客
12-11 764
using System; using System.Collections.Generic; using System.ComponentModel; using System.Data; using System.Drawing; using System.Linq; using System.Text; using System.Threading.Tasks; using System.W...
C#全局鼠标钩子完整源码
05-25
以下是C#全局鼠标钩子的完整源码： 首先，创建一个名为MouseHook的类，实现IMouseHook接口： ```csharp using System; using System.Runtime.InteropServices; namespace MouseHookExample { public class MouseHook : IMouseHook { private const int WH_MOUSE_LL = 14; private const int WM_LBUTTONDOWN = 0x0201; private const int WM_RBUTTONDOWN = 0x0204; private LowLevelMouseProc _proc; private IntPtr _hookId = IntPtr.Zero; public event EventHandler<MouseEventArgs> LeftButtonDown; public event EventHandler<MouseEventArgs> RightButtonDown; public void Start() { _proc = HookCallback; _hookId = SetHook(_proc); } public void Stop() { UnhookWindowsHookEx(_hookId); _hookId = IntPtr.Zero; } private IntPtr SetHook(LowLevelMouseProc proc) { using (var curProcess = System.Diagnostics.Process.GetCurrentProcess()) using (var curModule = curProcess.MainModule) { return SetWindowsHookEx(WH_MOUSE_LL, proc, GetModuleHandle(curModule.ModuleName), 0); } } private IntPtr HookCallback(int nCode, IntPtr wParam, IntPtr lParam) { if (nCode >= 0 && (wParam == (IntPtr)WM_LBUTTONDOWN || wParam == (IntPtr)WM_RBUTTONDOWN)) { var hookStruct = (MSLLHOOKSTRUCT)Marshal.PtrToStructure(lParam, typeof(MSLLHOOKSTRUCT)); var args = new MouseEventArgs(hookStruct.pt.x, hookStruct.pt.y); if (wParam == (IntPtr)WM_LBUTTONDOWN) { LeftButtonDown?.Invoke(this, args); } else if (wParam == (IntPtr)WM_RBUTTONDOWN) { RightButtonDown?.Invoke(this, args); } } return CallNextHookEx(_hookId, nCode, wParam, lParam); } private delegate IntPtr LowLevelMouseProc(int nCode, IntPtr wParam, IntPtr lParam); [DllImport("user32.dll", CharSet = CharSet.Auto, SetLastError = true)] private static extern IntPtr SetWindowsHookEx(int idHook, LowLevelMouseProc lpfn, IntPtr hMod, uint dwThreadId); [DllImport("user32.dll", CharSet = CharSet.Auto, SetLastError = true)] [return: MarshalAs(UnmanagedType.Bool)] private static extern bool UnhookWindowsHookEx(IntPtr hhk); [DllImport("user32.dll", CharSet = CharSet.Auto, SetLastError = true)] private static extern IntPtr CallNextHookEx(IntPtr hhk, int nCode, IntPtr wParam, IntPtr lParam); [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)] private static extern IntPtr GetModuleHandle(string lpModuleName); [StructLayout(LayoutKind.Sequential)] private struct POINT { public int x; public int y; } [StructLayout(LayoutKind.Sequential)] private struct MSLLHOOKSTRUCT { public POINT pt; public uint mouseData; public uint flags; public uint time; public IntPtr dwExtraInfo; } } } ``` 接下来，定义一个名为MouseEventArgs的类，用于传递鼠标事件的参数： ```csharp using System; namespace MouseHookExample { public class MouseEventArgs : EventArgs { public int X { get; } public int Y { get; } public MouseEventArgs(int x, int y) { X = x; Y = y; } } } ``` 最后，定义一个名为IMouseHook的接口，用于规范MouseHook类的实现： ```csharp using System; namespace MouseHookExample { public interface IMouseHook { event EventHandler<MouseEventArgs> LeftButtonDown; event EventHandler<MouseEventArgs> RightButtonDown; void Start(); void Stop(); } } ``` 现在，我们可以在其他类中使用该鼠标钩子： ```csharp using System; namespace MouseHookExample { class Program { static void Main(string[] args) { var mouseHook = new MouseHook(); mouseHook.LeftButtonDown += (sender, e) => Console.WriteLine($"Left button down at ({e.X}, {e.Y})"); mouseHook.RightButtonDown += (sender, e) => Console.WriteLine($"Right button down at ({e.X}, {e.Y})"); mouseHook.Start(); Console.WriteLine("Press any key to exit..."); Console.ReadKey(); mouseHook.Stop(); } } } ``` 现在，当用户按下鼠标左键或右键时，程序将在控制台中输出相应的信息。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值