在DLL中獲取主進程窗口句柄

注入到進程之后需要宿主進程的句柄來完成某些動作； 可以采用下列方法來獲取宿主進程窗口句柄

 

BOOL CALLBACK EnumWindowsProc(HWND hwnd, LPARAM lParam) 
{ 
    DWORD dwCurProcessId = *((DWORD*)lParam); 
    DWORD dwProcessId = 0; 
 
    GetWindowThreadProcessId(hwnd, &dwProcessId); 
    if(dwProcessId == dwCurProcessId && GetParent(hwnd) == NULL)
    { 
        *((HWND *)lParam) = hwnd;
        return FALSE; 
    } 
    return TRUE; 
} 
 
 
HWND GetMainWindow() 
{ 
    DWORD dwCurrentProcessId = GetCurrentProcessId();
    if(!EnumWindows(EnumWindowsProc, (LPARAM)&dwCurrentProcessId)) 
    {     
        return (HWND)dwCurrentProcessId; 
    } 
    return NULL; 
} 
 
BOOLEAN WINAPI DllMain(
        IN HINSTANCE hDllHandle, 
        IN DWORD     nReason,    
        IN LPVOID    Reserved)
{
    BOOLEAN bSuccess = TRUE;
 
    switch ( nReason )
    {
    case DLL_PROCESS_ATTACH:
        MessageBox(GetMainWindow(), TEXT("OMG~ You are Attacked!"), TEXT("Warning"), MB_ICONWARNING);
        break;
 
    case DLL_PROCESS_DETACH:
        break;
    }
 
    return bSuccess;
}