S.l.e!ep.¢%

像打了激速一样,以四倍的速度运转,开心的工作
简单、开放、平等的公司文化;尊重个性、自由与个人价值;
posts - 1098, comments - 335, trackbacks - 0, articles - 1
  C++博客 :: 首页 :: 新随笔 :: 联系 :: 聚合  :: 管理

日历

<2009年9月>
303112345
6789101112
13141516171819
20212223242526
27282930123
45678910

公告


mail: sleepwom@163.com (每月一看)

文章档案(1)

收藏夹(3)

DataStruct

搜索

  •  

积分与排名

  • 积分 - 1243844
  • 排名 - 10

最新评论

阅读排行榜

评论排行榜

HOOK钩子机制学习笔记(3) - 钩子常用结构体MSDN翻译整理 收藏 

作者:MaybeHelios     blog: http://blog.csdn.net/maybehelios/   

下面是应用Hook时会用到的各种结构。

结构1:CBT_CREATEWND Structure

    The CBT_CREATEWND structure contains information passed to a WH_CBT hook procedure, CBTProc, before a window is created.
    该结构包含有:在一个窗口被创建之前传递给WH_CBT钩子子程,即CBTProc,的信息。

typedef struct {
    LPCREATESTRUCT lpcs;
    HWND hwndInsertAfter;
} CBT_CREATEWND, *LPCBT_CREATEWND;

Members成员
lpcs
    Pointer to a CREATESTRUCT structure that contains initialization parameters for the window about to be created.
    一个指向CREATESTRUCT结构的指针,该结构包含即将被创建的窗体的初始化参数。

hwndInsertAfter
    Handle to the window whose position in the Z order precedes that of the window being created.
    窗体的句柄,该窗体的Z轴位置在正在被创建的窗体的Z轴位置之前。

结构2:CBTACTIVATESTRUCT Structure

    The CBTACTIVATESTRUCT structure contains information passed to a WH_CBT hook procedure, CBTProc, before a window is activated.
    CBTACTIVATESTRUCT 结构包含在窗体被激活之前,传递给WH_CBT钩子子程CBTProc 的信息。

typedef struct {
    BOOL fMouse;
    HWND hWndActive;
} CBTACTIVATESTRUCT, *LPCBTACTIVATESTRUCT;

Members 成员
fMouse
    Specifies whether the window is being activated as a result of a mouse click. This value is TRUE if a mouse click is causing the activation or FALSE if it is not.
    指定窗体是否是由于鼠标的点击而导致被激活.如果是因为鼠标的点击而引发了窗体的激活,返回true,否则返回false。

hWndActive
    Handle to the active window.
    活动窗口的句柄。

结构3:CWPRETSTRUCT Structure

    The CWPRETSTRUCT structure defines the message parameters passed to a WH_CALLWNDPROCRET hook procedure, CallWndRetProc.
    CWPRETSTRUCT结构定义了传递给WH_CALLWNDPROCRET钩子子程CallWndRetProc的消息参数。

typedef struct {
    LRESULT lResult;
    LPARAM lParam;
    WPARAM wParam;
    UINT message;
    HWND hwnd;
} CWPRETSTRUCT, *PCWPRETSTRUCT;

Members成员
lResult
    Specifies the return value of the window procedure that processed the message specified by the message value. 
    指定了窗体程序的返回值,该窗体程序处理由 message 值指定的消息。

lParam / wParam
    Specifies additional information about the message. The exact meaning depends on the message value.
    指定消息的附加信息。附加的意义取决于message的值。

message
    Specifies the message.
    指定消息。

hwnd
    Handle to the window that processed the message specified by the message value.
    处理由message的值指定的消息的窗体的窗体句柄。

结构4:CWPSTRUCT Structure

    The CWPSTRUCT structure defines the message parameters passed to a WH_CALLWNDPROC hook procedure, CallWndProc.
    CWPSTRUCT 结构定义了传递给WH_CALLWNDPROC钩子子程CallWndProc的消息参数。

typedef struct {
    LPARAM lParam;
    WPARAM wParam;
    UINT message;
    HWND hwnd;
} CWPSTRUCT, *PCWPSTRUCT;

Members
lParam  / wParam
    Specifies additional information about the message. The exact meaning depends on the message value.
    指定消息的附加信息。附加的意义取决于message的值。

message
    Specifies the message.
    指定消息

hwnd
    Handle to the window to receive the message.
    接收消息的窗体的句柄。


 
结构5:DEBUGHOOKINFO Structure
    The DEBUGHOOKINFO structure contains debugging information passed to a WH_DEBUG hook procedure, DebugProc.
    DEBUGHOOKINFO结构包含有传递给WH_DEBUG钩子子程DebugProc的调试信息。

typedef struct {
    DWORD idThread;
    DWORD idThreadInstaller;
    LPARAM lParam;
    WPARAM wParam;
    int code;
} DEBUGHOOKINFO, *PDEBUGHOOKINFO;

Members成员
idThread
    Handle to the thread containing the filter function.
    包含过滤方法的线程的句柄。

idThreadInstaller
    Handle to the thread that installed the debugging filter function.
    安装调试过滤方法的线程的句柄。

lParam / wParam
    Specifies the value to be passed to the hook in the lParam parameter of the DebugProc callback function.
    指定在DebugProc回调函数的lParam/ wParam 参数中,要传递给钩子的值。

code
    Specifies the value to be passed to the hook in the nCode parameter of the DebugProc callback function.
    指定在DebugProc回调函数的nCode 参数中,要传递给钩子的值。

结构6:EVENTMSG Structure

    The EVENTMSG structure contains information about a hardware message sent to the system message queue. This structure is used to store message information for the JournalPlaybackProc callback function.
    该结构包含有关于硬件的消息,该消息被发送给系统的消息队列。该结构用来为JournalPlaybackProc回调函数存储消息的信息。

typedef struct {
    UINT message;
    UINT paramL;
    UINT paramH;
    DWORD time;
    HWND hwnd;
} EVENTMSG, *PEVENTMSG;

Members成员
message
    Specifies the message.
    指定消息。

paramH / paramH
    Specifies additional information about the message. The exact meaning depends on the message value.
    指定消息的附加信息。附加的意义取决于message的值。

time
    Specifies the time at which the message was posted.
    消息被传递时的时间 。

hwnd
    Handle to the window to which the message was posted.
    消息被传给的窗口的句柄。

结构7:KBDLLHOOKSTRUCT Structure

    The KBDLLHOOKSTRUCT structure contains information about a low-level keyboard input event.
    该结构包含有低层键盘输入事件的信息。

typedef struct {
    DWORD vkCode;
    DWORD scanCode;
    DWORD flags;
    DWORD time;
    ULONG_PTR dwExtraInfo;
} KBDLLHOOKSTRUCT, *PKBDLLHOOKSTRUCT;

Members成员
vkCode
    Specifies a virtual-key code. The code must be a value in the range 1 to 254. 
    指定虚拟键值。该值必须在1到254的范围内。

scanCode
    Specifies a hardware scan code for the key.
    指定键的硬件扫描码。

flags
    Specifies the extended-key flag, event-injected flag, context code, and transition-state flag. This member is specified as follows. An application can use the following values to test the keystroke flags.
    指定扩展键标志,事件注入标志,上下文代码,转换状态码。成员如下所示。应用程序可以使用下列值来检查键盘敲击标志。

    Value值                            Purpose目的
    LLKHF_EXTENDED     Test the extended-key flag. 测试扩展键标志。
    LLKHF_INJECTED       Test the event-injected flag. 测试事件注入标志。
    LLKHF_ALTDOWN       Test the context code. 测试上下文代码。
    LLKHF_UP                    Test the transition-state flag. 测试转换状态码。
 
    0 :Specifies whether the key is an extended key, such as a function key or a key on the numeric keypad. The value is 1 if the key is an extended key; otherwise, it is 0.
    指定该键是否是扩展键,例如:功能键、数字键盘上的键。是扩展键为1,否则为0。

    1-3 :Reserved. 保留。

    4  :Specifies whether the event was injected. The value is 1 if the event was injected; otherwise, it is 0.
    指定事件是否被注入。被注入为1,否则为0。

    5  :Specifies the context code. The value is 1 if the ALT key is pressed; otherwise, it is 0.
    指定上下文代码。如果按下了ALT,该值为1,否则为0

    6  :Reserved. 保留。

    7  :Specifies the transition state. The value is 0 if the key is pressed and 1 if it is being released.
    指定转换状态。如果该键被按下该值为1,如果被释放为0。

time
    Specifies the time stamp for this message, equivalent to what GetMessageTime would return for this message.
    指定消息的时间戳,相当于GetMessageTime返回的值。

dwExtraInfo
    Specifies extra information associated with the message.
    指定和该消息相关联的扩展信息。

结构8 :MOUSEHOOKSTRUCT Structure

      T he MOUSEHOOKSTRUCT structure contains information about a mouse event passed to a WH_MOUSE hook procedure, MouseProc.
     MOUSEHOOKSTRUCT结构包含有传递给WH_MOUSE钩子子程MouseProc的,关于鼠标事件的信息。

typedef struct {
    POINT pt;
    HWND hwnd;
    UINT wHitTestCode;
    ULONG_PTR dwExtraInfo;
} MOUSEHOOKSTRUCT, *PMOUSEHOOKSTRUCT;

Members成员
pt
    Specifies a POINT structure that contains the x- and y-coordinates of the cursor, in screen coordinates.
    指定在屏幕坐标系下,包含有光标x、y坐标的POINT结构。

hwnd
    Handle to the window that will receive the mouse message corresponding to the mouse event.
    希望对鼠标事件做出响应、接收鼠标消息的窗体的句柄。

wHitTestCode
    Specifies the hit-test value. For a list of hit-test values, see the description of the WM_NCHITTEST message.
    指定点击测试值。查看WM_NCHITTEST消息可以得到值的列表。

dwExtraInfo
    Specifies extra information associated with the message.
    指定和该消息相关联的附加信息。

结构9:MOUSEHOOKSTRUCTEX Structure

    The MOUSEHOOKSTRUCTEX structure contains information about a mouse event passed to a WH_MOUSE hook procedure, MouseProc.
    MOUSEHOOKSTRUCTEX结构包含有传递给WH_MOUSE钩子子程MouseProc的关于鼠标事件的信息。

    This is an extension of the MOUSEHOOKSTRUCT structure that includes information about wheel movement or the use of the X button.
    这是对MOUSEHOOKSTRUCT的扩展。包含有滚轮的活动和X键的使用。

typedef struct {
    MOUSEHOOKSTRUCT MOUSEHOOKSTRUCT;
    DWORD mouseData;
} MOUSEHOOKSTRUCTEX, *PMOUSEHOOKSTRUCTEX;

Members成员
MOUSEHOOKSTRUCT
    The members of a MOUSEHOOKSTRUCT structure make up the first part of this structure.
    MOUSEHOOKSTRUCT结构的成员构成了该结构的前面部分。

mouseData
    If the message is WM_MOUSEWHEEL, the HIWORD of this member is the wheel delta. The LOWORD is undefined and reserved. A positive value indicates that the wheel was rotated forward, away from the user; a negative value indicates that the wheel was rotated backward, toward the user. One wheel click is defined as WHEEL_DELTA, which is 120.
    如果消息是WM_MOUSEWHEEL,该成员的HIWORD就是wheel delta。LOWORD做为保留未定义。正值表示滚轮向前旋转,即远离用户的方向;负值表示滚轮向后旋转,即朝向用户的方向。滚轮的点击被定义为WHEEL_DELTA, 具体值为120。

    If the message is WM_XBUTTONDOWN, WM_XBUTTONUP, WM_XBUTTONDBLCLK, WM_NCXBUTTONDOWN, WM_NCXBUTTONUP, or WM_NCXBUTTONDBLCLK, the HIWORD of mouseData specifies which X button was pressed or released, and the LOWORD is undefined and reserved. This member can be one or more of the following values. Otherwise, mouseData is not used.
    如果消息是WM_XBUTTONDOWN, WM_XBUTTONUP, WM_XBUTTONDBLCLK, WM_NCXBUTTONDOWN, WM_NCXBUTTONUP, 或者 WM_NCXBUTTONDBLCLK,  mouseData  的HIWORD值指定哪个X键被按下或者释放,LOWORD做为保留未定义。该成员可以是以下值中的一个或者多个。否则,mouseData未使用。
    1.XBUTTON1 :The first X button was pressed or released. 第一个X键被按下或者释放。
    2.XBUTTON2 :The second X button was pressed or released.第二个X键被按下或者释放。

结构9:MSLLHOOKSTRUCT Structure

    The MSLLHOOKSTRUCT structure contains information about a low-level keyboard input event. (msdn错误)
    该MSLLHOOKSTRUCT结构包含有低层键盘输入事件的信息。

typedef struct {
    POINT pt;
    DWORD mouseData;
    DWORD flags;
    DWORD time;
    ULONG_PTR dwExtraInfo;
} MSLLHOOKSTRUCT, *PMSLLHOOKSTRUCT;

Members成员
pt
    Specifies a POINT structure that contains the x- and y-coordinates of the cursor, in screen coordinates.
    指定在屏幕坐标系下,包含有光标x、y坐标的POINT结构。

mouseData
    If the message is WM_MOUSEWHEEL, the HIWORD of this member is the wheel delta. The LOWORD is undefined and reserved. A positive value indicates that the wheel was rotated forward, away from the user; a negative value indicates that the wheel was rotated backward, toward the user. One wheel click is defined as WHEEL_DELTA, which is 120.
    如果消息是WM_MOUSEWHEEL,该成员的HIWORD就是wheel delta。LOWORD做为保留未定义。正值表示滚轮向前旋转,即远离用户的方向;负值表示滚轮向后旋转,即朝向用户的方向。滚轮的点击被定义为WHEEL_DELTA, 具体值为120。
    If the message is WM_XBUTTONDOWN, WM_XBUTTONUP, WM_XBUTTONDBLCLK, WM_NCXBUTTONDOWN, WM_NCXBUTTONUP, or WM_NCXBUTTONDBLCLK, the HIWORD of mouseData specifies which X button was pressed or released, and the LOWORD is undefined and reserved. This member can be one or more of the following values. Otherwise, mouseData is not used.
    如果消息是WM_XBUTTONDOWN, WM_XBUTTONUP, WM_XBUTTONDBLCLK, WM_NCXBUTTONDOWN, WM_NCXBUTTONUP, 或者 WM_NCXBUTTONDBLCLK,  mouseData  的HIWORD值指定哪个X键被按下或者释放,LOWORD做为保留未定义。该成员可以是以下值中的一个或者多个。否则,mouseData未使用。
    1.XBUTTON1:The first X button was pressed or released. 第一个X键被按下或者释放。
    2.XBUTTON2 :The second X button was pressed or released.第二个X键被按下或者释放。

flags
    Specifies the event-injected flag. An application can use the following value to test the mouse flags.    
    指定事件注入标志。应用程序可以使用下列值来测试鼠标标志。

    Value                            Purpose
    LLMHF_INJECTED   Test the event-injected flag.测试事件注入标志。

    0
    Specifies whether the event was injected. The value is 1 if the event was injected; otherwise, it is 0.     事件是否被注入。如果被注入,为 1,否则为0

    1-15 :Reserved.保留

time
    Specifies the time stamp for this message.
    消息的时间戳。

dwExtraInfo
    Specifies extra information associated with the message.
    消息的扩展信息。


本文来自CSDN博客,转载请标明出处:http://blog.csdn.net/jiangxinyu/archive/2010/02/03/5284094.aspx


只有注册用户登录后才能发表评论。
网站导航: 博客园   IT新闻   BlogJava   博问   Chat2DB   管理