I’m working on a program that uses low-level keyboard hooks (LowLevelKeyboardProc) to detect key combinations and switch focus between windows of specific processes. The goal is for the program to move focus to the next or previous window of a set of programs when detecting Shift + E or Shift + Q.

I am trying to parse the import address table of NTDLL, I have done this previously trying to iterate over each module, but I was getting a strange base address. I scrapped that approach and have done the below, but I get the exact same base address.

I’m using Rust and I’m attempting to convert to create a HashMap with the proper name of all virtual keys. So far, I have this code:

I have the problem in which my payload DLL is not getting loaded and ran by my other executable program.

In my rust experiments I’m currently trying the following. I want to display a basic empty window using the windows crate and the windows API. The below code compiles and executes. The only thing it does not do is display an actual window. What am I doing wrong here as the code looks find to me and the e.g. c++ equivalent would show a window I believe.