DLL注入--SetWindowsHookEx 注入

HHOOKWINAPISetWindowsHookExW(    _In_ int idHook, //WH_* 取值范围    _In_ HOOKPROC lpfn, //Hook处理函数    _In_opt_ HINSTANCE hmod, //函数来自于的模块（NULL标识本进程程序）_In_ DWORD dwThreadId //Hook的目标线程ID);

#define WH_KEYBOARD         2 //键盘消息#define WH_GETMESSAGE       3 //监视发布到消息队列的消息#define WH_CBT              5 //激活，创建，销毁，最小化，最大化，移动或调整窗口大小之前调用此函数#define WH_MOUSE            7 //鼠标消息#define WH_KEYBOARD_LL     13 //低级键盘消息#define WH_MOUSE_LL        14 //低级鼠标消息

HANDLE hLoadEvt = OpenEvent(EVENT_ALL_ACCESS, FALSE, GLOBAL_LOAD_EVENT); //是否驻留if (hLoadEvt)        {            if (WaitForSingleObject(hLoadEvt, 0) == WAIT_OBJECT_0)            {                CloseHandle(hLoadEvt);                return TRUE;    //驻留并且不触发注入操作            }            CloseHandle(hLoadEvt);        }

#include <stdio.h>#include <tchar.h>#include <windows.h>
#define DLL_NAME _T("X:\XXX\XXX\DllInject.dll")
#define GLOBAL_INJECT_EVENT  _T("Global\Inject")#define GLOBAL_LOAD_EVENT  _T("Global\Load")
int main(){  BOOLEAN isSuccess = FALSE;  DWORD dwThreadId;  printf("输入线程ID:");  scanf_s("%d", &dwThreadId);    HHOOK hHook = NULL;  HANDLE hDll = NULL;  HANDLE hInjectEvt = NULL;  HANDLE hLoadEvent = NULL;  do {    hLoadEvent = CreateEvent(NULL, TRUE, FALSE, GLOBAL_LOAD_EVENT);    if (!hLoadEvent)      break;    SetEvent(hLoadEvent);    hDll = LoadLibrary(DLL_NAME);    if (!hDll)    {      printf("加载Dll失败!n");      break;    }    ResetEvent(hLoadEvent);        PVOID MsgCallback = GetProcAddress(hDll, "MsgCallback");    if (!MsgCallback)    {      printf("获得Dll回调函数失败!n");      break;    }
    hInjectEvt = CreateEvent(NULL, FALSE, FALSE, GLOBAL_INJECT_EVENT);    if (!hInjectEvt)    {      printf("创建事件失败!n");      break;    }
    hHook = SetWindowsHookEx(WH_CBT, MsgCallback, hDll, dwThreadId);    if (!hHook)    {      printf("创建消息构造!n");      break;    }    WaitForSingleObject(hInjectEvt, INFINITE);    printf("成功注入!n");    UnhookWindowsHookEx(hHook);    isSuccess = TRUE;  } while (FALSE);  if (!isSuccess)    printf("错误代码%dn", GetLastError());
  if (hLoadEvent)    CloseHandle(hLoadEvent);
  if (hHook)    UnhookWindowsHookEx(hHook);
  if (hDll)    FreeLibrary(hDll);    return 0;}