c++ DLL注入调用

char* pLocalMem;
HANDLE hFileMapping = 0;
GUID ProviderGuid = { 0xd3c21100, 0x85e1, 0x48f3, { 0x9a, 0xb6, 0x23, 0xd9, 0x0c, 0x75, 0x08, 0xef } };

LPWSAPROTOCOL_INFOW GetProvider(LPINT lpnTotalProtocols)
{
 DWORD dwSize = 0;
 int nError;
 LPWSAPROTOCOL_INFOW pProtoInfo = NULL;

 // 取得需要的长度
 if (::WSCEnumProtocols(NULL, pProtoInfo, &dwSize, &nError) == SOCKET_ERROR)
 {
  if (nError != WSAENOBUFS)
   return NULL;
 }

 pProtoInfo = (LPWSAPROTOCOL_INFOW)::GlobalAlloc(GPTR, dwSize);
 *lpnTotalProtocols = ::WSCEnumProtocols(NULL, pProtoInfo, &dwSize, &nError);
 return pProtoInfo;
}
void FreeProvider(LPWSAPROTOCOL_INFOW pProtoInfo)
{
 ::GlobalFree(pProtoInfo);
}
BOOL InstallProvider(WCHAR *pwszPathName)
{
 WCHAR wszLSPName[] = L"TiredLSP";
 LPWSAPROTOCOL_INFOW pProtoInfo;
 int nProtocols;
 WSAPROTOCOL_INFOW OriginalProtocolInfo[3];
 DWORD dwOrigCatalogId[3];
 int nArrayCount = 0;
 DWORD dwLayeredCatalogId; // 我们分层协议的目录ID号
 int nError;

 // 找到我们的下层协议，将信息放入数组中
 // 枚举所有服务程序提供者
 pProtoInfo = GetProvider(&nProtocols);
 BOOL bFindUdp = FALSE;
 BOOL bFindTcp = FALSE;
 BOOL bFindRaw = FALSE;
 for (int i = 0; i < nProtocols; i )
 {
  if (pProtoInfo[i].iAddressFamily == AF_INET)
  {
   if (!bFindUdp && pProtoInfo[i].iProtocol == IPPROTO_UDP)
   {
    memcpy(&OriginalProtocolInfo[nArrayCount], &pProtoInfo[i], sizeof(WSAPROTOCOL_INFOW));
    OriginalProtocolInfo[nArrayCount].dwServiceFlags1 =
     OriginalProtocolInfo[nArrayCount].dwServiceFlags1 & (~XP1_IFS_HANDLES);

    dwOrigCatalogId[nArrayCount ] = pProtoInfo[i].dwCatalogEntryId;
    bFindUdp = TRUE;
   }
   if (!bFindTcp && pProtoInfo[i].iProtocol == IPPROTO_TCP)
   {
    memcpy(&OriginalProtocolInfo[nArrayCount], &pProtoInfo[i], sizeof(WSAPROTOCOL_INFOW));
    OriginalProtocolInfo[nArrayCount].dwServiceFlags1 =
     OriginalProtocolInfo[nArrayCount].dwServiceFlags1 & (~XP1_IFS_HANDLES);

    dwOrigCatalogId[nArrayCount ] = pProtoInfo[i].dwCatalogEntryId;
    bFindTcp = TRUE;
   }
   if (!bFindRaw && pProtoInfo[i].iProtocol == IPPROTO_IP)
   {
    memcpy(&OriginalProtocolInfo[nArrayCount], &pProtoInfo[i], sizeof(WSAPROTOCOL_INFOW));
    OriginalProtocolInfo[nArrayCount].dwServiceFlags1 =
     OriginalProtocolInfo[nArrayCount].dwServiceFlags1 & (~XP1_IFS_HANDLES);

    dwOrigCatalogId[nArrayCount ] = pProtoInfo[i].dwCatalogEntryId;
    bFindRaw = TRUE;
   }
  }
 }
 // 安装我们的分层协议，获取一个dwLayeredCatalogId
 // 随便找一个下层协议的结构复制过来即可
 WSAPROTOCOL_INFOW LayeredProtocolInfo;
 memcpy(&LayeredProtocolInfo, &OriginalProtocolInfo[0], sizeof(WSAPROTOCOL_INFOW));
 // 修改协议名称，类型，设置PFL_HIDDEN标志
 wcscpy_s(LayeredProtocolInfo.szProtocol, wszLSPName);
 LayeredProtocolInfo.ProtocolChain.ChainLen = LAYERED_PROTOCOL; // 0;
 LayeredProtocolInfo.dwProviderFlags |= PFL_HIDDEN;
 // 安装
 if (::WSCInstallProvider(&ProviderGuid,
  pwszPathName, &LayeredProtocolInfo, 1, &nError) == SOCKET_ERROR)
 {
  printf("%d", nError);
  return FALSE;
 }
 // 重新枚举协议，获取分层协议的目录ID号
 FreeProvider(pProtoInfo);
 pProtoInfo = GetProvider(&nProtocols);
 for (int i = 0; i < nProtocols; i )
 {
  if (memcmp(&pProtoInfo[i].ProviderId, &ProviderGuid, sizeof(ProviderGuid)) == 0)
  {
   dwLayeredCatalogId = pProtoInfo[i].dwCatalogEntryId;
   break;
  }
 }
 // 安装协议链
 // 修改协议名称，类型
 WCHAR wszChainName[WSAPROTOCOL_LEN 1];
 for (int i = 0; i<nArrayCount; i )
 {
  swprintf_s(wszChainName, L"%ws over %ws", wszLSPName, OriginalProtocolInfo[i].szProtocol);
  wcscpy_s(OriginalProtocolInfo[i].szProtocol, wszChainName);
  if (OriginalProtocolInfo[i].ProtocolChain.ChainLen == 1)
  {
   OriginalProtocolInfo[i].ProtocolChain.ChainEntries[1] = dwOrigCatalogId[i];
  }
  else
  {
   for (int j = OriginalProtocolInfo[i].ProtocolChain.ChainLen; j>0; j--)
   {
    OriginalProtocolInfo[i].ProtocolChain.ChainEntries[j]
     = OriginalProtocolInfo[i].ProtocolChain.ChainEntries[j - 1];
   }
  }
  OriginalProtocolInfo[i].ProtocolChain.ChainLen ;
  OriginalProtocolInfo[i].ProtocolChain.ChainEntries[0] = dwLayeredCatalogId;
 }
 // 获取一个Guid，安装之
 GUID ProviderChainGuid;
 if (::UuidCreate(&ProviderChainGuid) == RPC_S_OK)
 {
  if (::WSCInstallProvider(&ProviderChainGuid,
   pwszPathName, OriginalProtocolInfo, nArrayCount, &nError) == SOCKET_ERROR)
  {
   return FALSE;
  }
 }
 else
  return FALSE;
 // 重新排序Winsock目录，将我们的协议链提前
 // 重新枚举安装的协议
 FreeProvider(pProtoInfo);
 pProtoInfo = GetProvider(&nProtocols);
 PDWORD dwIds = (PDWORD)malloc(sizeof(DWORD)* nProtocols);
 int nIndex = 0;
 // 添加我们的协议链
 for (int i = 0; i<nProtocols; i )
 {
  if ((pProtoInfo[i].ProtocolChain.ChainLen > 1) &&
   (pProtoInfo[i].ProtocolChain.ChainEntries[0] == dwLayeredCatalogId))
   dwIds[nIndex ] = pProtoInfo[i].dwCatalogEntryId;
 }
 // 添加其它协议
 for (int i = 0; i < nProtocols; i )
 {
  if ((pProtoInfo[i].ProtocolChain.ChainLen <= 1) ||
   (pProtoInfo[i].ProtocolChain.ChainEntries[0] != dwLayeredCatalogId))
   dwIds[nIndex ] = pProtoInfo[i].dwCatalogEntryId;
 }
 // 重新排序Winsock目录
 if ((nError = ::WSCWriteProviderOrder(dwIds, nIndex)) != ERROR_SUCCESS)
 {
  return FALSE;
 }
 FreeProvider(pProtoInfo);
 return TRUE;
}
BOOL RemoveProvider()
{
 LPWSAPROTOCOL_INFOW pProtoInfo;
 int nProtocols;
 DWORD dwLayeredCatalogId;
 // 根据Guid取得分层协议的目录ID号
 pProtoInfo = GetProvider(&nProtocols);
 int nError;
 int i;
 for (i = 0; i < nProtocols; i )
 {
  if (memcmp(&ProviderGuid, &pProtoInfo[i].ProviderId, sizeof(ProviderGuid)) == 0)
  {
   dwLayeredCatalogId = pProtoInfo[i].dwCatalogEntryId;
   break;
  }
 }
 if (i < nProtocols)
 {
  // 移除协议链
  for (i = 0; i<nProtocols; i )
  {
   if ((pProtoInfo[i].ProtocolChain.ChainLen > 1) &&
    (pProtoInfo[i].ProtocolChain.ChainEntries[0] == dwLayeredCatalogId))
   {
    ::WSCDeinstallProvider(&pProtoInfo[i].ProviderId, &nError);
   }
  }

  // 移除分层协议
  ::WSCDeinstallProvider(&ProviderGuid, &nError);
 }
 else return FALSE;
 return TRUE;
}

BOOL SetShareRAM(char * ProxyExeName, char *ProxyIP, int Proxyport, BOOL Verification, char *UserName, char *PassWord, int SetPort, int ProxyMode, char *ShutIP, char *Key)
{
 pLocalMem = (char*)MapViewOfFile(hFileMapping, FILE_MAP_WRITE, 0, 0, 100);
 if (NULL == pLocalMem)
 {
  return FALSE;
 }

 //pLocalMem = "mir1.dat|122.192.32.77|7280|1|admin|admin133|0|2|11|Key";
 sprintf_s(pLocalMem, 100, "%s|%s|%d|%d|%s|%s|%d|%d|%s|%s", ProxyExeName, ProxyIP, Proxyport, Verification, UserName, PassWord, SetPort, ProxyMode, ShutIP, Key);
 //UnmapViewOfFile(pLocalMem);
 //MessageBoxA(NULL, (char*)pLocalMem, "提示", MB_OK);

 return TRUE;
}

void main(int argc, char *argv[])
{
 WCHAR szBuf[MAX_PATH] = { 0 };

 GetCurrentDirectoryW(MAX_PATH, szBuf);
 wcscat(szBuf, L"\\LSP.dll");

 hFileMapping = CreateFileMappingW(HANDLE(0xFFFFFFFFFFFFFFFF), NULL, PAGE_READWRITE, 0, 100, L"mySharedMemory");
 SetShareRAM(argv[1], argv[2], atoi(argv[3]), TRUE, "username", "password", 0, 2, "000", "Key");  //写入代理信息

 if (InstallProvider(szBuf))
 {
  system("pause");
 }

 if (strcmp(argv[4], "StopProxy") == 0) RemoveProvider();
}