高手们看过来，调用CreateRemoteThread的问题。

[mygod_tt]

请问高手们，我在调用CreateRemoteThread时返回为NULL，GetLastError返回错误代码为8（Not enough storage is available to process this command.），是何原因？函数原型如下：
HANDLE CreateRemoteThread(
HANDLE hProcess, // handle to process
LPSECURITY_ATTRIBUTES lpThreadAttributes, // SD
SIZE_T dwStackSize, // initial stack size
LPTHREAD_START_ROUTINE lpStartAddress, // thread function
LPVOID lpParameter, // thread argument
DWORD dwCreationFlags, // creation option
LPDWORD lpThreadId // thread identifier
);

[linuxpgy]

Not enough storage is available to process this command
没有足够的有效存储空间来处理这个命令

请检查每个参数的正确性

[mygod_tt]

我函数是这样写的。另外，我忘说了，它不是总不成功，他遇到某些没有界面的进程时就不行，多数情况下是可以的，各位摆脱了，救救我，感谢感谢！！
BOOL FUNC(DWORD dPID,LPCTSTR szLibFile)
{
BOOL bResult = FALSE;
HANDLE hProcess = NULL;
HANDLE hThread = NULL;
PSTR pszLibFileRemote = NULL;
__try
{
// Get a handle for the process we want to inject into
hProcess = ::OpenProcess(
PROCESS_ALL_ACCESS, // Specifies all possible access flags
FALSE,
dPID
);
if (hProcess == NULL)
__leave;
// Calculate the number of bytes needed for the DLL's pathname
int cch = 1 + strlen(szLibFile);

// Allocate space in the remote process for the pathname
pszLibFileRemote = (PSTR)::VirtualAllocEx(
hProcess,
NULL,
cch,
MEM_COMMIT,
PAGE_READWRITE
);
if (pszLibFileRemote == NULL)
__leave;
// Copy the DLL's pathname to the remote process's address space
if (!::WriteProcessMemory(
hProcess,
(PVOID)pszLibFileRemote,
(PVOID)szLibFile,
cch,
NULL))
__leave;
// Get the real address of LoadLibraryW in Kernel32.dll
PTHREAD_START_ROUTINE pfnThreadRtn = (PTHREAD_START_ROUTINE)
::GetProcAddress(::GetModuleHandle("Kernel32"), "LoadLibraryA");
if (pfnThreadRtn == NULL)
__leave;
// Create a remote thread that calls LoadLibraryW(DLLPathname)
hThread = ::CreateRemoteThread(
hProcess,
NULL,
0,
pfnThreadRtn,
(PVOID)pszLibFileRemote,
0,
NULL
);
if (hThread == NULL) //???????????????????????????
{
DWORD dw = ::GetLastError();

__leave;
}
// Wait for the remote thread to terminate
::WaitForSingleObject(hThread, INFINITE);

bResult = TRUE;
}
return bResult;
}

[gaooo]

你怎么调的？代码

[wangk]

CreateRemoteThread的远线程必须和当前线程在同一环境。
比如都在Session 1.

[linuxpgy]

没有界面的进程??

你需要提升权限