ANTICHAT — форум по информационной безопасности, OSINT и технологиям

function InjectLibrary(Process: LongWord; DLLPath: PChar): Boolean;
var
  Parameters: Pointer;
  BytesWritten, Thread, ThreadID: dword;
begin
  Result := False;
  Parameters := VirtualAllocEx(Process, nil, 4096, MEM_COMMIT, PAGE_READWRITE);
  if Parameters = nil then
    Exit;
  WriteProcessMemory(Process, Parameters, Pointer(DLLPath), 4096, BytesWritten);
  Thread := CreateRemoteThread(Process, nil, 0, GetProcAddress(GetModuleHandle('KERNEL32.DLL'), 'LoadLibraryA'), Parameters, 0, ThreadId);
  WaitForSingleObject(Thread, 3000);
  VirtualFreeEx(Process, Parameters, 0, MEM_RELEASE);
  if Thread = 0 then
    Exit;
  CloseHandle(Thread);
  Result := True;
end;

LPVOID WINAPI VirtualAllocEx(
  __in          HANDLE hProcess,
  __in          LPVOID lpAddress,
  __in          SIZE_T dwSize,
  __in          DWORD flAllocationType,
  __in          DWORD flProtect
);

hProcess 
The handle to a process. The function allocates memory within the virtual address space of this process.

uses "все что было", WinSvc;