C / C++ / MFC

<br />
DWORD __stdcall RemoteThreadProc(LPVOID lParam)    <br />
{    <br />
     LoadLibraryA(NULL);   //crash!!! Why crash???<br />
     return 0;    <br />
}<br />
<br />
DWORD Inject(HANDLE hTargetProcess)<br />
{<br />
    //Compare local calling with calling in remote thread proceduer.<br />
    LoadLibraryA(NULL);	  //Ok!!!<br />
    //=======================================================<br />
<br />
    DWORD dwWriteBytes;<br />
    //The size of thread procedure code. Estimated it.<br />
    DWORD dwThreadSize = 5000;	<br />
<br />
    //Allocate memory in another process space<br />
    void* pRemoteThread = VirtualAllocEx(hTargetProcess, 0, <br />
        dwThreadSize, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);<br />
<br />
    //Write thread procedure code to target process.<br />
    if (!WriteProcessMemory(hTargetProcess, pRemoteThread, <br />
        RemoteThreadProc, dwThreadSize, 0)) {<br />
        //Failed!!!<br />
        return 0;<br />
    }<br />
<br />
    //Create remote thread<br />
    HANDLE hRemoteThread = CreateRemoteThread(<br />
        hTargetProcess, NULL, 0, (DWORD (__stdcall *)(void *))pRemoteThread,<br />
        NULL, 0, &dwWriteBytes);<br />
<br />
    if (!hRemoteThread) {<br />
        //Failed!!!<br />
        return -1;<br />
    }<br />
    <br />
    return 1; //Successfully<br />
}<br />
//============================================<br />
//Base on WinsowsXP sp2 、VC6.0 <br />
//============================================<br />