BOOL CInjectTestDlg::injectDllToProcess(void)
{
	BOOL bOk = FALSE; // Assume that the function fails
	HANDLE hProcess = NULL, hThread = NULL;
	PCSTR pszLibFileRemote = NULL;

	UpdateData(TRUE);
	do 
	{
		hProcess = OpenProcess(
			PROCESS_QUERY_INFORMATION |   // Required by Alpha
			PROCESS_CREATE_THREAD     |   // For CreateRemoteThread
			PROCESS_VM_OPERATION      |   // For VirtualAllocEx/VirtualFreeEx
			PROCESS_VM_WRITE,             // For WriteProcessMemory
			FALSE, m_processID);
		if (hProcess == NULL) break;

		PCSTR dllName =  m_DllName.GetBuffer(m_DllName.GetLength());

		//在目标程序开辟内存
		pszLibFileRemote = (PCSTR) 
			VirtualAllocEx(hProcess, NULL,strlen(dllName)*sizeof(CHAR)+1, MEM_COMMIT, PAGE_READWRITE);
		if (pszLibFileRemote == NULL) break;

		//将dll路径全名写入目标内存
		if (!WriteProcessMemory(hProcess, (LPVOID)pszLibFileRemote, 
			(PVOID)dllName, strlen(dllName)*sizeof(CHAR)+1, NULL)) 
		{
			//	m_DllName.ReleaseBuffer();
			break;
		}

		//启动目标线程并让其执行LoadLibraryA
		PTHREAD_START_ROUTINE pfnThreadRtn = (PTHREAD_START_ROUTINE)
			GetProcAddress(GetModuleHandle(TEXT("Kernel32")), "LoadLibraryA");
		if (pfnThreadRtn == NULL) break;

		hThread = CreateRemoteThread(hProcess, NULL, 0, 
			pfnThreadRtn, (LPVOID)pszLibFileRemote, 0, NULL);
		if (hThread == NULL) break;

		// 等待程序结束
		WaitForSingleObject(hThread, INFINITE);

		if (pszLibFileRemote != NULL) 
			VirtualFreeEx(hProcess, (LPVOID)pszLibFileRemote, 0, MEM_RELEASE);

		if (hThread  != NULL) 
			CloseHandle(hThread);

		if (hProcess != NULL) 
			CloseHandle(hProcess);
		bOk = TRUE;

	} while (FALSE);
	if(bOk)
	{
	//	MessageBox("注入成功",NULL,MB_OK);
	}
	else
	{
		MessageBox("注入失败",NULL,MB_OK);
	}
	return bOk;
}