|

楼主 |
发表于 2022-9-23 12:47:15
|
显示全部楼层
dwProcessId,是我需要的程序的ID号,已经获得了,没有问题
LPVOID lpRemotePath
hProcess=OpenProcess(PROCESS_VM_OPERATION|PROCESS_VM_WRITE|PROCESS_CREATE_THREAD|PROCESS_VM_READ|PROCESS_ALL_ACESS,false,dwProcessId);
(LPTSTR)VirtualAllocEx(hProcess,NULL,_tcslen(lpPath)+1)*sizeof(TCHAR),MEM_COMMIT,PAGE_READWRITE)
lpPath是我自定义的路径,也取到值了
HANDLE hRemoteThread;
DWORD dwThreadId;
hModule=GetModuleHandle(TEXT("kernel32.dll"));
LoadLibraryA=(lpfnLoadLibraryA)GetProcAddress(hModule,TEXT("LoadLibraryA"));
hRemoteThread=CreateRemoteThread(hProcess,NULL,0,(LPTHREAD_START_ROUTINE)LoadLibraryA, (LPVOID)lpRemotePath,0,&dwThreadId); |
|