Windows Messages sniffen.

[fylo]

Hi

in der WinAPI-Help ist folgendes zum SetWindowsHookEx und zum WH_CBT lesen:

Zitat:

HCBT_ACTIVATE
The system is about to activate a window.

HCBT_CLICKSKIPPED
The system has removed a mouse message from the system message queue. Upon receiving this hook code, a CBT application must install a WH_JOURNALPLAYBACK hook procedure in response to the mouse message.

HCBT_CREATEWND
A window is about to be created. The system calls the hook procedure before sending the WM_CREATE or WM_NCCREATE message to the window. If the hook procedure returns a nonzero value, the system destroys the window; the CreateWindow function returns NULL, but the WM_DESTROY message is not sent to the window. If the hook procedure returns zero, the window is created normally.
At the time of the HCBT_CREATEWND notification, the window has been created, but its final size and position may not have been determined and its parent window may not have been established. It is possible to send messages to the newly created window, although it has not yet received WM_NCCREATE or WM_CREATE messages. It is also possible to change the position in the Z order of the newly created window by modifying the hwndInsertAfter member of the CBT_CREATEWND structure.

HCBT_DESTROYWND
A window is about to be destroyed.

HCBT_KEYSKIPPED
The system has removed a keyboard message from the system message queue. Upon receiving this hook code, a CBT application must install a WH_JOURNALPLAYBACK_hook hook procedure in response to the keyboard message.

HCBT_MINMAX
A window is about to be minimized or maximized.

HCBT_MOVESIZE
A window is about to be moved or sized.

HCBT_QS
The system has retrieved a WM_QUEUESYNC message from the system message queue.

HCBT_SETFOCUS
A window is about to receive the keyboard focus.

HCBT_SYSCOMMAND
A system command is about to be carried out. This allows a CBT application to prevent task switching by means of hot keys.