Start.exe 安装 Insert.dll 中的 WH_GETMESSAGE 钩子.在钩子回调函数中

判断当前进程ID是否先前 Start.exe 查找到的 Explorer进程ID, 是的话,则

再次LoadLibrary(Insert.dll),并定位到其中ThreadPro函数. 此时创建一个

新线程,线程函数就是ThreadPro,该新线程首先往Start.exe消息队列放置一个线

程退出消息 WM_QUIT,导致其消息循环结束. 此时插入线程完成..可以看到屏幕

左上角不断变化的数字..说明我们的代码正在执行.进程列表却没有Start.exe,

用进程管理观察,可发现Explorer进程,的确多了个线程,且来自Insert.dll ..

如果希望插入Explorer的线程结束,按 Alt+L 即可... :)-Start.exe Insert.dll installation of WH_GETMESSAGE hook. in the hook callback function to judge whether the current process ID prior to the search Start.exe Expl orer process ID, the answer is yes, then again LoadLibrary (Insert.dll) and the positioning of which ThreadPro function. At this time the creation of a new thread, Thread is ThreadPro function, The first new thread to Start.exe Message Queue placed a thread from the news WM_QUIT. lead to the end of the news cycle. At this point, insert threads completed .. can see the screen in the upper left corner evolving digital note .. Our code is being implemented. List of the process did not Start.exe with process management observation, Explorer process can be found, it is true, of a thread, and from Insert.dll .. If you want to insert the