远程注入与卸载DLL

//提升本进程权限
BOOL GetPrivilege()
{
	HANDLE tokenHandle;
	BOOL bRet = OpenProcessToken(GetCurrentProcess(), TOKEN_ALL_ACCESS, &tokenHandle);
	if (bRet){
		TOKEN_PRIVILEGES tokenPri;
		tokenPri.PrivilegeCount = 1;
		tokenPri.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
		bRet = LookupPrivilegeValue(NULL, SE_DEBUG_NAME, &tokenPri.Privileges[0].Luid);
		if (bRet){
			bRet = AdjustTokenPrivileges(tokenHandle, FALSE, &tokenPri, sizeof(tokenPri), NULL, NULL);
		}
		CloseHandle(tokenHandle);
	}
	return bRet;
}

//注入DLL（dllPath为DLL的绝对路径）
BOOL injectDLL(DWORD pid,PTCHAR dllPath,int maxPathLen)
{
	BOOL bRet;
	HANDLE hProc = OpenProcess(PROCESS_ALL_ACCESS, FALSE, pid);
	if (hProc){
		PVOID  pBuf = VirtualAllocEx(hProc, NULL, maxPathLen, MEM_COMMIT, PAGE_EXECUTE_READWRITE);
		if (pBuf){
			bRet = WriteProcessMemory(hProc, pBuf, dl