我在一个dll里面写了如下代码,再用另外一个进程LoadLibrary,但是却拦截不了键盘消息,下断点发现set钩子函数没问题,但是跳不到要执行的函数那里(在xp环境下做的)

插入代码
```#include <windows.h>
#include <stdio.h>
HHOOK g_hHook = NULL; //全局保存键盘钩子句柄，取消钩子的时候用


void OutputDbgInfo(char *format,int param)
{
    char *str;
    sprintf(str,format,param);

    OutputDebugString(str);
}

LRESULT CALLBACK HookKeyboardMsg(int code,WPARAM wParam,LPARAM lParam)
{
    LRESULT lResult = 1;

    __try
    {
        if(wParam == VK_F1)
        {
            MessageBox(NULL,"加速已开启","tip",MB_OK);

            return lResult;
        }

        lResult = CallNextHookEx(g_hHook,code,wParam,lParam);
    }
    __except(EXCEPTION_EXECUTE_HANDLER)
    {
        OutputDbgInfo("[-] HookKeyboardMsg Exception,code:%d\n",GetLastError());

        return -1;
    }

    return lResult;
}

BOOL HookKeyboard(DWORD dwThread)
{
    BOOL bSuccess = TRUE;
    HHOOK hhook;

    __try
    {
        hhook = SetWindowsHookEx(WH_KEYBOARD,(HOOKPROC)HookKeyboardMsg,NULL,dwThread);

        if(hhook == NULL)
        {
            OutputDbgInfo("[-] SetWindowsHookEx error,code:%d\n",GetLastError());

            bSuccess = FALSE;
        }

        g_hHook = hhook;
    }
    __except(EXCEPTION_EXECUTE_HANDLER)
    {
        OutputDbgInfo("[-] SetWindowsHookEx Exception,code:%d\n",GetLastError());

        return FALSE;
    }

    return bSuccess;
}

BOOL APIENTRY DllMain( HANDLE hModule, 
                       DWORD  ul_reason_for_call, 
                       LPVOID lpReserved
                     )
{
    switch (ul_reason_for_call)
    {
        case DLL_PROCESS_ATTACH:
            HookKeyboard(::GetCurrentThreadId());
        case DLL_THREAD_ATTACH:
        case DLL_THREAD_DETACH:
        case DLL_PROCESS_DETACH:
            break;
    }
    return TRUE;
}

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)