ess(GetModuleHandle(TEXT("Kernel32")), "LoadLibraryW");
   CheckError((int)pfnStartAddr, NULL, "GetProcAddress");
   //启动远程线程，通过远程线程调用用户的DLL文件   
   hRemoteThread = CreateRemoteThread( hRemoteProcess, NULL, 0,                                                         pfnStartAddr, pszLibFileRemote, 0, NULL);
   CheckError((int)hRemoteThread, NULL, "Create Remote Thread");
   //等待远程线程退出
   WaitForSingleObject(hRemoteThread, INFINITE);
   //清场处理
   if (pszLibFileRemote != NULL)
       VirtualFreeEx(hRemoteProcess, pszLibFileRemote, 0, MEM_RELEASE);
   if (hRemoteThread != NULL) CloseHandle(hRemoteThread );
   if (hRemoteProcess!= NULL) CloseHandle(hRemoteProcess);
}//end of main()

//将进程名转换为PID的函数
DWORD ProcessToPID(char *InputProcessName)
{
   DWORD aProcesses[1024], cbNeeded, cProcesses;
   unsigned int i;
   HANDLE hProcess;
   HMODULE hMod;
   char szProcessName[MAX_PATH] = "UnknownProcess";

 

   // 计算目前有多少进程, aProcesses用来存放有效的进程PIDs
   if ( !EnumProcesses( aProcesses, sizeof(aProcesses), &cbNeeded ) )  return 0;
   cProcesses = cbNeeded / sizeof(DWORD);
   // 按有效的PID遍历所有的进程
   for ( i = 0; i < cProcesses; i++ )
   {
       // 打开特定PID的进程
       hProcess = OpenProcess( PROCESS_QUERY_INformATION |
PROCESS_VM_READ,
                FALSE, aProcesses[i]);
       // 取得特定PID的进程名
       if ( hProcess )
       {
           if ( EnumProcessModules( hProcess, &hMod, sizeof(hMod), &cbNeeded) )
           {
               GetModuleBaseName( hProcess, hMod,
szProcessName, sizeof(szProcessName) );
               //将取得的进程名与输入的进程名比较，如相同则返回进程PID
               if(!_stricmp(szProcessName, InputProcessName)){
                   CloseHandle( hProcess );