#define MAX_KEYBOARD_COUNT 10
HANDLE hKbdTable[MAX_KEYBOARD_COUNT];
HANDLE hReadKbdEvt[MAX_KEYBOARD_COUNT];
USHORT KbdInputBuffer[16] = {0};
 
 
UCHAR ScancodeTable[] =
{
0,
0, //ESC
'1','2','3','4','5','6','7','8','9','0',
0,0,0,0,
'Q','W','E','R','T','Y','U','I','O','P',
0,0,
0, //ENTER
0,
'A','S','D','F','G','H','J','K','L',
0,0,0,0,0,
'Z','X','C','V','B','N','M'
};
 
BOOLEAN KeyboardHandler(PULONG pulResult)
{
	HANDLE hKbdDevice = NULL;
	ULONG i = 0;
	ULONG ulKbdNum = 0;
	PWCHAR szwKbdDeviceName = NULL;
	OBJECT_ATTRIBUTES ObjectAttributes;
	NTSTATUS ntStatus = STATUS_UNSUCCESSFUL;
	UNICODE_STRING usDeviceName;
	PIO_STATUS_BLOCK pIoStatusBlocks = NULL;
	LARGE_INTEGER TimeOut;
	LARGE_INTEGER ByteOffset;
	ULONG ulCharCount = 0;
	BOOLEAN bIsEsc = FALSE; //是否输入了ESC
	BOOLEAN bIsEnter = FALSE; //是否输入了回车
	BOOLEAN bIsScanAllDrive = FALSE; //扫描全盘标志位
	WCHAR szwPrintMsg[16] = {0};
	KEYBOARD_INPUT_DATA KeyboardInputData = {0};
 
	ASSERT(pulResult != NULL);
 
	__asm int 3
	szwKbdDeviceName = (PWCHAR)RtlAllocateHeap(Heap, 0, 128);
 
	if (NULL == szwKbdDeviceName)
	{
		return FALSE;
	}
 
	pIoStatusBlocks = (PIO_STATUS_BLOCK)RtlAllocateHeap(Heap, 0, sizeof(IO_STATUS_BLOCK)*MAX_KEYBOARD_COUNT);
 
	if (NULL == pIoStatusBlocks)
	{
		return FALSE;
	}
 
	//
	// 尝试打开系统中所有的键盘设备
	//
	for (; i < MAX_KEYBOARD_COUNT; i++)
	{
		RtlZeroMemory(szwKbdDeviceName, 128);
 
		swprintf(szwKbdDeviceName, L"\\Device\\KeyboardClass%d", i);
 
		RtlInitUnicodeString(&usDeviceName,szwKbdDeviceName);
 
		InitializeObjectAttributes(&ObjectAttributes,&usDeviceName,OBJ_CASE_INSENSITIVE ,NULL,NULL);
 
		ntStatus = NtCreateFile(&hKbdDevice, \
				0x80100080,
				&ObjectAttributes, &pIoStatusBlocks[i], NULL, FILE_ATTRIBUTE_NORMAL, 0, 1, 1, NULL ,0);
 
		if (NT_SUCCESS(ntStatus))
		{
			hKbdTable[ulKbdNum] = hKbdDevice;
			InitializeObjectAttributes(&ObjectAttributes, NULL, 0, NULL, NULL);
			ntStatus = NtCreateEvent(&hReadKbdEvt[ulKbdNum], 0x1F01FF, NULL, SynchronizationEvent, FALSE);
 
			ulKbdNum++;
		}
 
	}
 
	TimeOut.QuadPart = -10 * 1000 * 1000;
	TimeOut.QuadPart *= 10;
 
	ByteOffset.QuadPart = 0;
 
	while(TRUE)
	{
		for (i = 0; i < ulKbdNum; i++)
		{
			ntStatus = NtReadFile(hKbdTable[i], hReadKbdEvt[i], NULL, NULL, &pIoStatusBlocks[i], &KeyboardInputData, sizeof(KEYBOARD_INPUT_DATA), &ByteOffset, NULL);
 
			if (ntStatus == STATUS_PENDING)
			{
				ntStatus = NtWaitForSingleObject(hReadKbdEvt[i], FALSE, &TimeOut);
 
				if (ntStatus == STATUS_TIMEOUT)
				{
					NtCancelIoFile(hKbdTable[i], &pIoStatusBlocks[i]);
				}
				else
				{
					//保存数据
					if (KeyboardInputData.MakeCode == 0x1C) //如果是回车
					{
					    bIsEnter = TRUE;
					    break;
					}
					else if (KeyboardInputData.MakeCode == 0x01) //如果是ESC
					{
					    bIsEsc = TRUE;
					    break;
					}
					else if (KeyboardInputData.MakeCode == 0x3B) //如果是F1键 则扫描全盘
					{
					    bIsScanAllDrive = TRUE;
					    break;
					}
 
					if (KeyboardInputData.Flags == 0)
					{
					    if (KeyboardInputData.MakeCode<sizeof(ScancodeTable))
                        {
                            //则不做任何处理
                            swprintf(szwPrintMsg, L"%c", ScancodeTable[KeyboardInputData.MakeCode]);
					        DisplayString(szwPrintMsg);
 
					        if (ulCharCount &lt;16)
					            KbdInputBuffer[ulCharCount++] = ScancodeTable[KeyboardInputData.MakeCode];
                        }
					}
				}
			}
 
		}
 
		//如果输入了回车或者ESC键则停止记录键盘
 
	    if (bIsEnter)
	    {
	        *pulResult = 1;
	        break;
	    }
	    else if (bIsEsc)
	    {
	        *pulResult = 2;
	        break;
	    }
	    else if (bIsScanAllDrive)
	    {
	        *pulResult = 3;
	        break;
	    }
	}
 
	return TRUE;
}