相信以前用过VB、Delphi,特别是VC的程序员应该对钩子程序都不陌生。在C#中我们同样可以使用钩子程序来实现特殊效果,比如当用户按下某个特殊键时提示,比如关闭应用程序前提示等。
当然使用方法相对VC来说要稍微复杂一点,有的地方还不太方便,下面的例子中实现两个基本功能:
1、按下Alt+F4时使窗口最小化
2、关闭应用程序前提示
不过目前只能捕获消息,不能屏蔽消息,我正在实验,也希望知道的高手能多多指教
一、加入winuser.h中的定义
因为钩子程序一般情况下都是在vc下使用的,在c#里面并没有对应的方法、结构等的定义,我们首先需要把winuser.h中的相关定义加入自己的类
钩子类型的枚举
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicenumHookType:int
{
WH_JOURNALRECORD=0,
WH_JOURNALPLAYBACK=1,
WH_KEYBOARD=2,
WH_GETMESSAGE=3,
WH_CALLWNDPROC=4,
WH_CBT=5,
WH_SYSMSGFILTER=6,
WH_MOUSE=7,
WH_HARDWARE=8,
WH_DEBUG=9,
WH_SHELL=10,
WH_FOREGROUNDIDLE=11,
WH_CALLWNDPROCRET=12,
WH_KEYBOARD_LL=13,
WH_MOUSE_LL=14
}
具体的说明在msdn中都可以查到,主要的比如WH_KEYBOARD是监控按键事件,WH_CALLWNDPROC是在消息触发时执行
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicenumHookType:int
{
WH_JOURNALRECORD=0,
WH_JOURNALPLAYBACK=1,
WH_KEYBOARD=2,
WH_GETMESSAGE=3,
WH_CALLWNDPROC=4,
WH_CBT=5,
WH_SYSMSGFILTER=6,
WH_MOUSE=7,
WH_HARDWARE=8,
WH_DEBUG=9,
WH_SHELL=10,
WH_FOREGROUNDIDLE=11,
WH_CALLWNDPROCRET=12,
WH_KEYBOARD_LL=13,
WH_MOUSE_LL=14
}
虚键值的定义
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicenumVirtualKeys
{
VK_SHIFT=0x10,
VK_CONTROL=0x11,
VK_MENU=0x12,//ALT
VK_PAUSE=0x13,
VK_CAPITAL=0x14
}
这个不用说明了,对应ALT、CTRL等键
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicenumVirtualKeys
{
VK_SHIFT=0x10,
VK_CONTROL=0x11,
VK_MENU=0x12,//ALT
VK_PAUSE=0x13,
VK_CAPITAL=0x14
}
消息结构体
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicstructCWPSTRUCT
{
publicIntPtrlparam;
publicIntPtrwparam;
publicintmessage;
publicIntPtrhwnd;
}
这个是windows内部传递过来的消息的结构
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicstructCWPSTRUCT
{
publicIntPtrlparam;
publicIntPtrwparam;
publicintmessage;
publicIntPtrhwnd;
}
二、加入自己定义的委托和事件参数
钩子委托
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicdelegateintHookProc(intcode,IntPtrwParam,IntPtrlParam);
publicdelegatevoidHookEventHandler(objectsender,HookEventArgse);
HokkProc是
SetWindowsHookEx调用时的委托事件,HookEventHandler是自己的委托事件
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicdelegateintHookProc(intcode,IntPtrwParam,IntPtrlParam);
publicdelegatevoidHookEventHandler(objectsender,HookEventArgse);
钩子事件参数
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicclassHookEventArgs:EventArgs
{
publicintHookCode;
publicIntPtrwParam;
publicIntPtrlParam;
publicKeyskey;
publicboolbAltKey;
publicboolbCtrlKey;
}
是自己的委托事件中接受的事件参数
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->publicclassHookEventArgs:EventArgs
{
publicintHookCode;
publicIntPtrwParam;
publicIntPtrlParam;
publicKeyskey;
publicboolbAltKey;
publicboolbCtrlKey;
}
三、实现自己的钩子类
这一步是最重要的,要使用钩子,我们需要引用 user32.dll中的相应方法:
[DllImport(
"
user32.dll
"
)]
static extern IntPtrSetWindowsHookEx(HookTypehook,HookProccallback,IntPtrhMod, uint dwThreadId);
[DllImport( " user32.dll " )]
static extern bool UnhookWindowsHookEx(IntPtrhhk);
[DllImport( " user32.dll " )]
static extern int CallNextHookEx(IntPtrhhk, int nCode,IntPtrwParam,IntPtrlParam);
[DllImport( " user32.dll " )]
static extern short GetKeyState(VirtualKeysnVirtKey);
SetWindowsHookEx是注册一个钩子程序,
UnhookWindowsHookEx是释放钩子程序,
CallNextHookEx调用钩子的后续事件处理,
GetKeyState得到所按的虚键
static extern IntPtrSetWindowsHookEx(HookTypehook,HookProccallback,IntPtrhMod, uint dwThreadId);
[DllImport( " user32.dll " )]
static extern bool UnhookWindowsHookEx(IntPtrhhk);
[DllImport( " user32.dll " )]
static extern int CallNextHookEx(IntPtrhhk, int nCode,IntPtrwParam,IntPtrlParam);
[DllImport( " user32.dll " )]
static extern short GetKeyState(VirtualKeysnVirtKey);
然后就可以调用这些方法来实现钩子程序,比如注册一个钩子可以调用:
m_hook
=
SetWindowsHookEx(m_hooktype,m_hookproc,IntPtr.Zero,(
uint
)AppDomain.GetCurrentThreadId());
其中m_hooktype就是
HookType中定义的类型,m_hookproc就是实际的钩子处理程序:
m_hookproc
=
new
HookProc(KeyHookProcedure);
最关键的就是 KeyHookProcedure等钩子处理程序:
protected
int
KeyHookProcedure(
int
code,IntPtrwParam,IntPtrlParam)
{
if(code!=0)
{
returnCallNextHookEx(m_hook,code,wParam,lParam);
}
if(HookInvoked!=null)
{
Keyskey=(Keys)wParam.ToInt32();
HookEventArgseventArgs=newHookEventArgs();
eventArgs.key=key;
eventArgs.lParam=lParam;
eventArgs.wParam=wParam;
eventArgs.HookCode=code;
eventArgs.bAltKey=GetKeyState(VirtualKeys.VK_MENU)<=-127;
eventArgs.bCtrlKey=GetKeyState(VirtualKeys.VK_CONTROL)<=-127;
HookInvoked(this,eventArgs);
}
returnCallNextHookEx(m_hook,code,wParam,lParam);
}
在这个事件中可以取得消息的参数,特别是按键的值,然后通过HookInvoked委托调用事件实际的处理程序
{
if(code!=0)
{
returnCallNextHookEx(m_hook,code,wParam,lParam);
}
if(HookInvoked!=null)
{
Keyskey=(Keys)wParam.ToInt32();
HookEventArgseventArgs=newHookEventArgs();
eventArgs.key=key;
eventArgs.lParam=lParam;
eventArgs.wParam=wParam;
eventArgs.HookCode=code;
eventArgs.bAltKey=GetKeyState(VirtualKeys.VK_MENU)<=-127;
eventArgs.bCtrlKey=GetKeyState(VirtualKeys.VK_CONTROL)<=-127;
HookInvoked(this,eventArgs);
}
returnCallNextHookEx(m_hook,code,wParam,lParam);
}
四、在应用程序中调用钩子类
我们可以在自己的form中声明两个钩子对象
private
MyHookcallProcHook
=
new
MyHook(HookType.WH_CALLWNDPROC);
private MyHookkeyHook = new MyHook(HookType.WH_KEYBOARD);
然后在初始化时注册钩子:
private MyHookkeyHook = new MyHook(HookType.WH_KEYBOARD);
private
void
Form1_Load(
object
sender,EventArgse)
{
keyHook.HookInvoked+=newHookEventHandler(keyHook_HookInvoked);
keyHook.Install();
callProcHook.HookInvoked+=newHookEventHandler(callProcHook_HookInvoked);
callProcHook.Install();
}
{
keyHook.HookInvoked+=newHookEventHandler(keyHook_HookInvoked);
keyHook.Install();
callProcHook.HookInvoked+=newHookEventHandler(callProcHook_HookInvoked);
callProcHook.Install();
}
然后就是实际的钩子事件:
private
void
keyHook_HookInvoked(
object
sender,HookEventArgse)
{
if(e.key==Keys.F4&&e.bAltKey)//Alt+F4
{
this.WindowState=FormWindowState.Minimized;
}
}
private void callProcHook_HookInvoked( object sender,HookEventArgse)
{
unsafe
{
CWPSTRUCT*message=(CWPSTRUCT*)e.lParam;
if(message!=null)
{
if(message->message==WM_CLOSE)
{
(senderasMyHook).CallNextProc=false;
MessageBox.Show("程序即将关闭!");
}
}
}
}
{
if(e.key==Keys.F4&&e.bAltKey)//Alt+F4
{
this.WindowState=FormWindowState.Minimized;
}
}
private void callProcHook_HookInvoked( object sender,HookEventArgse)
{
unsafe
{
CWPSTRUCT*message=(CWPSTRUCT*)e.lParam;
if(message!=null)
{
if(message->message==WM_CLOSE)
{
(senderasMyHook).CallNextProc=false;
MessageBox.Show("程序即将关闭!");
}
}
}
}
这样我们就可以通过钩子实现一些相对底层的应用。
代码说的有点乱,我就把最主要的代码直接列在下面供大家参考:
例子代码
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->1usingSystem;
2usingSystem.Collections.Generic;
3usingSystem.ComponentModel;
4usingSystem.Data;
5usingSystem.Drawing;
6usingSystem.Text;
7usingSystem.Windows.Forms;
8usingSystem.Runtime.InteropServices;
9
10namespaceHookTest
11{
12publicpartialclassForm1:Form
13{
14消息定义(WinUser.h中定义)#region消息定义(WinUser.h中定义)
15privateconstintWM_PAINT=0x000F;
16privateconstintWM_CLOSE=0x0010;
17privateconstintWM_QUIT=0x0012;
18privateconstintWM_DESTROY=0x0002;
19#endregion
20
21privateMyHookcallProcHook=newMyHook(HookType.WH_CALLWNDPROC);
22privateMyHookkeyHook=newMyHook(HookType.WH_KEYBOARD);
23
24publicForm1()
25{
26InitializeComponent();
27}
28
29privatevoidForm1_Load(objectsender,EventArgse)
30{
31keyHook.HookInvoked+=newHookEventHandler(keyHook_HookInvoked);
32keyHook.Install();
33
34callProcHook.HookInvoked+=newHookEventHandler(callProcHook_HookInvoked);
35callProcHook.Install();
36}
37
38privatevoidkeyHook_HookInvoked(objectsender,HookEventArgse)
39{
40if(e.key==Keys.F4&&e.bAltKey)//Alt+F4
41{
42this.WindowState=FormWindowState.Minimized;
43}
44}
45
46privatevoidcallProcHook_HookInvoked(objectsender,HookEventArgse)
47{
48unsafe
49
<!--<br /><br />Code highlighting produced by Actipro CodeHighlighter (freeware)<br />http://www.CodeHighlighter.com/<br /><br />-->1usingSystem;
2usingSystem.Collections.Generic;
3usingSystem.ComponentModel;
4usingSystem.Data;
5usingSystem.Drawing;
6usingSystem.Text;
7usingSystem.Windows.Forms;
8usingSystem.Runtime.InteropServices;
9
10namespaceHookTest
11{
12publicpartialclassForm1:Form
13{
14消息定义(WinUser.h中定义)#region消息定义(WinUser.h中定义)
15privateconstintWM_PAINT=0x000F;
16privateconstintWM_CLOSE=0x0010;
17privateconstintWM_QUIT=0x0012;
18privateconstintWM_DESTROY=0x0002;
19#endregion
20
21privateMyHookcallProcHook=newMyHook(HookType.WH_CALLWNDPROC);
22privateMyHookkeyHook=newMyHook(HookType.WH_KEYBOARD);
23
24publicForm1()
25{
26InitializeComponent();
27}
28
29privatevoidForm1_Load(objectsender,EventArgse)
30{
31keyHook.HookInvoked+=newHookEventHandler(keyHook_HookInvoked);
32keyHook.Install();
33
34callProcHook.HookInvoked+=newHookEventHandler(callProcHook_HookInvoked);
35callProcHook.Install();
36}
37
38privatevoidkeyHook_HookInvoked(objectsender,HookEventArgse)
39{
40if(e.key==Keys.F4&&e.bAltKey)//Alt+F4
41{
42this.WindowState=FormWindowState.Minimized;
43}
44}
45
46privatevoidcallProcHook_HookInvoked(objectsender,HookEventArgse)
47{
48unsafe
49