using ? System .Runtime.InteropServices;

//?==========include文件==========
//?定義回調(diào)函數(shù)的函數(shù)類型
typedef?VOID?(CALLBACK?*CallBackFunc)(WPARAM,?LPARAM);

//?安裝鉤子(當(dāng)include被其他程序引用的時(shí)候，dllexport?→?dllimport)
extern ?" C "?__declspec(dllexport)?VOID?InstallHook(HINSTANCE,?CallBackFunc,?CallBackFunc);

//?卸載鉤子(當(dāng)include被其他程序引用的時(shí)候，dllexport?→?dllimport)
extern ?" C "?__declspec(dllexport)?VOID?UninstallHook();

//?==========cpp文件==========
//?KB=Keyboard
//?MS=Mouse
//?鉤子的全局變量
HHOOK?_hHookKB?=?NULL;
HHOOK?_hHookMS?=?NULL;

//?Ctrl是否被按下
BOOL??_bCtrlDown?=?FALSE;

//?DLL外部傳入的回調(diào)函數(shù)(C#側(cè)傳入)
CallBackFunc?_funcMS?=?NULL;
CallBackFunc?_funcKB?=?NULL;

//?函數(shù)聲明
LRESULT?CALLBACK?LowLevelKeyboardProc( int ,?WPARAM,?LPARAM);
LRESULT?CALLBACK?LowLevelMouseProc( int ,?WPARAM,?LPARAM);

//?安裝鉤子
VOID? InstallHook (HINSTANCE?hInstance,?CallBackFunc?funcMS,?CallBackFunc?funcKB)
{
?? //?將外部傳入的回調(diào)函數(shù)保存起來
??_funcMS?=?funcMS;
??_funcKB?=?funcKB;

?? //?安裝鍵盤鉤子
?? if (_hHookKB?==?NULL)
??{
????_hHookKB?=?SetWindowsHookEx(WH_KEYBOARD_LL,?LowLevelKeyboardProc,?hInstance,?0);
??}

?? //?安裝鼠標(biāo)鉤子
?? if (_hHookMS?==?NULL)
??{
????_hHookMS?=?SetWindowsHookEx(WH_MOUSE_LL,?LowLevelMouseProc,?hInstance,?0);
??}
}

//?卸載鉤子
VOID? UninstallHook ()
{
?? //?卸載鼠標(biāo)鉤子
?? if (_hHookMS?!=?NULL)
??{
????UnhookWindowsHookEx(_hHookMS);
??}

?? //?卸載鍵盤鉤子
?? if (_hHookKB?!=?NULL)
??{
????UnhookWindowsHookEx(_hHookKB);
??}

?? //?全局函數(shù)清空
??_hHookKB?=?NULL;
??_hHookMS?=?NULL;
??_funcMS?=?NULL;
??_funcKB?=?NULL;
}

//?簡(jiǎn)單的鍵盤鉤子處理函數(shù)
LRESULT?CALLBACK? LowLevelKeyboardProc ( int ?nCode,?WPARAM?wParam,?LPARAM?lParam)
{
???? //?返回值，如果想屏蔽一些數(shù)據(jù)的話，比如不想讓監(jiān)視的應(yīng)用程序獲得Enter鍵的事件
???? //?那么在這個(gè)函數(shù)中處理完Enter鍵后，直接設(shè)定返回值為S_OK，不調(diào)用CallNextHookEx()直接返回
??LRESULT?nRet?=?S_FALSE;

?? //?一些鍵盤鉤子獲得的信息
?? //PKBDLLHOOKSTRUCT?pKb?=?(PKBDLLHOOKSTRUCT)lParam;

?? switch (nCode)
??{
???? case ?HC_ACTION:
?????? //?獲得此時(shí)Ctrl鍵的狀態(tài)
??????_bCtrlDown?=?((GetAsyncKeyState(VK_CONTROL)?&?0x8000)?!=?0);

?????? //?如果外部傳入過回調(diào)函數(shù)，則調(diào)用之
?????? if ?(_funcKB?!=?NULL)
??????{
????????_funcKB(wParam,?lParam);
??????}
?????? break ;
??}

?? //?為了使被監(jiān)視的程序正常處理事件，必須調(diào)用CallNextHookEx()
??nRet?=?CallNextHookEx(_hHookKB,?nCode,?wParam,?lParam);

?? return ?nRet;
}

//?簡(jiǎn)單的鼠標(biāo)鉤子處理函數(shù)
LRESULT?CALLBACK? LowLevelMouseProc ( int ?nCode,?WPARAM?wParam,?LPARAM?lParam)
{
???? //?返回值，如果想屏蔽一些數(shù)據(jù)的話，比如不想讓監(jiān)視的應(yīng)用程序獲得鼠標(biāo)滾輪的事件
???? //?那么在這個(gè)函數(shù)中處理完鼠標(biāo)滾輪事件后，直接設(shè)定返回值為S_OK，不調(diào)用CallNextHookEx()直接返回
??LRESULT?nRet?=?S_FALSE;

?? //?一些鼠標(biāo)鉤子獲得的信息
?? //PMOUSEHOOKSTRUCT?pMS?=?(PMOUSEHOOKSTRUCT)lParam;

?? switch (nCode)
??{
???? case ?HC_ACTION:
?????? //?鍵盤Ctrl按下的情況下，才調(diào)用鼠標(biāo)的回調(diào)函數(shù)
?????? if ?(_bCtrlDown?&&?_funcMS?!=?NULL)
??????{
????????_funcMS(wParam,?lParam);
??????}
?????? break ;
??}

?? //?為了使被監(jiān)視的程序正常處理事件，必須調(diào)用CallNextHookEx()
??nRet?=?CallNextHookEx(_hHookMS,?nCode,?wParam,?lParam);

?? return ?nRet;
}

//?一個(gè)簡(jiǎn)單的使用鉤子的運(yùn)用
public ? class ?UseHook
{
???? //?聲明DLL中的輸出函數(shù)
???? //?安裝鉤子函數(shù)
????[ DllImport (" xxx.dll ")]
???? public ? static ? extern ? void ?InstallHook( IntPtr ?hInstance,?CallBackFunc?funcMS,?CallBackFunc?funcKB);

???? //?卸載鉤子函數(shù)
????[ DllImport (" xxx.dll ")]
???? public ? static ? extern ? void ?UninstallHook();

???? //?回調(diào)函數(shù)聲明
???? public ? delegate ? void ?CallBackFunc( IntPtr ?wParam,? IntPtr ?lParam);

???? //?啟動(dòng)鉤子
???? public ? void ? Start ()
????{
???????? //?使用當(dāng)前模塊句柄啟動(dòng)鉤子
????????InstallHook(
????????????Marshal.GetHINSTANCE(
???????????????????? Assembly .GetEntryAssembly().GetModules()[0]
????????????????????),
????????????MouseCapture,
????????????KeyboardCapture
????????????);
????}

???? //?停止鉤子
???? public ? void ? Stop ()
????{
????????UninstallHook();
????}
????
???? //?鼠標(biāo)回調(diào)事件
???? protected ? void ? MouseCapture ( IntPtr ?wParam,? IntPtr ?lParam)
????{
???????? //?當(dāng)有鼠標(biāo)事件發(fā)生時(shí)，這個(gè)函數(shù)會(huì)被調(diào)用
????}

???? //?鍵盤回調(diào)事件
???? protected ? void ? KeyboardCapture ( IntPtr ?wParam,? IntPtr ?lParam)
????{
???????? //?當(dāng)有鍵盤事件發(fā)生時(shí)，這個(gè)函數(shù)會(huì)被調(diào)用
????}
}