Запуск кода в другом процессе

format pe gui 4.0
include 'win32ax.inc'
 
.data
p_info  PROCESS_INFORMATION
s_info  STARTUPINFO
hFile   rd 1
_out    rb 30
NumOfB  rb 100
mem     rd 1
size    rd 1
buff    rb 1536
 
.code
start:
mov [s_info.cb],sizeof.STARTUPINFO
mov [s_info.hStdError],0
mov [s_info.hStdOutput],0
mov [s_info.hStdInput],0
mov [s_info.dwFlags],100h                 ; STARTF_USESTDHANDLES
 
invoke CreateProcess,"C:\Windows\notepad.exe",NULL,NULL,NULL,FALSE,NORMAL_PRIORITY_CLASS,NULL,NULL, s_info, p_info
invoke CreateFile,"InjectProg.EXE",GENERIC_READ,FILE_SHARE_WRITE+FILE_SHARE_READ,0,\
OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,0
cmp    eax,-1
je     _err
mov    [hFile],eax
invoke GetFileSize,[hFile],NULL
mov    [size],eax
invoke wsprintfA,_out,"Размер файла %d",[size]
invoke VirtualAllocEx,[p_info.hProcess],0,[size],MEM_COMMIT,PAGE_EXECUTE_READWRITE
mov    [mem],eax
;invoke wsprintfA,_out,"Освобождено по адр. %d",[mem]
;invoke MessageBox,0,_out,"ProgDLL0.DLL",0
invoke ReadFile,[hFile],buff,[size],NumOfB,0
cmp eax,0
je _err
invoke CloseHandle,[hFile]
invoke WriteProcessMemory,[p_info.hProcess],[mem],buff,1536,0
;invoke CreateRemoteThread,[p_info.hProcess],0,0,[mem],0,0,0
;invoke CloseHandle,eax
exit:
invoke ExitProcess,0
_err:
invoke  MessageBox,HWND_DESKTOP,"error",invoke GetCommandLine,MB_ICONERROR
jmp exit
.end start

format PE GUI 4.0
include 'win32a.inc'
 
section '.code' code readable executable
 
 
proc Inj
invoke MessageBox,0,"stop","stop",MB_OK
;--------помещаем текст--------------------------
invoke MessageBox,HWND_DESKTOP," После нажатия ОК откроется шрифт по настройкам меню",0,MB_OK
invoke FindWindowExA,<invoke FindWindow,'notepad',0>,0,'edit',0
mov    [hw],eax
invoke SendMessageA,[hw],WM_SETTEXT,0,msg
;--------первый вариант шрифта---------------------
invoke MessageBox,HWND_DESKTOP,"После нажатия ОК откроется изменённый шрифт(первый вариант)",0,MB_OK
invoke CreateFontIndirectA,lf1
invoke SendMessageA,[hw],WM_SETFONT,eax,TRUE
invoke DeleteObject,lf1
 
 
;-------второй вариант шрифта-----------------------------
invoke MessageBox,HWND_DESKTOP,"После нажатия ОК откроется изменённый шрифт(второй вариант)",0,MB_OK
invoke CreateFontIndirectA,lf2
invoke SendMessageA,[hw],WM_SETFONT,eax,TRUE
invoke DeleteObject,lf2
invoke ExitThread,0
ret
endp
 
 
section '.data' data readable writeable
lf1 LOGFONT \
12,7,\ ;lfHeight & lfWidth
0,0,\ ;lfEscapement(наклон отн. Х в 10х градуса) & lfOrientation
FW_NORMAL,0,0,0,\ ;lfWeight & lfItalic & lfUnderline & lfStrikeOut
RUSSIAN_CHARSET,\ ;lfCharSet
OUT_DEFAULT_PRECIS,CLIP_DEFAULT_PRECIS,DEFAULT_QUALITY,\ ;lfOutPrecision & lfClipPrecision & lfQuality
FF_MODERN+FIXED_PITCH,\ ;lpPitchAndFamily ;FIXED_PITCH=моноширинный=красивосорцен Ж)
<"Tw Cen MT",0> ;lfFaceName
 
lf2 LOGFONT \
12,7,\ ;lfHeight & lfWidth
0,0,\ ;lfEscapement(наклон отн. Х в 10х градуса) & lfOrientation
FW_NORMAL,0,TRUE,0,\ ;lfWeight & lfItalic & lfUnderline & lfStrikeOut
RUSSIAN_CHARSET,\ ;lfCharSet
OUT_DEFAULT_PRECIS,CLIP_DEFAULT_PRECIS,DEFAULT_QUALITY,\ ;lfOutPrecision & lfClipPrecision & lfQuality
FF_MODERN+FIXED_PITCH,\ ;lpPitchAndFamily ;FIXED_PITCH=моноширинный=красивосорцен Ж)
<"courier new",0>
 
msg db 'fedcb9870',0
hw rd 1
 
section '.idata' import data readable writeable
 
  library kernel,'KERNEL32.DLL',\
          user,'USER32.DLL',\
          shell,'SHELL32.DLL',\
          gdi,'GDI32.DLL'
 
  import user,\
         MessageBox,'MessageBoxA',\
         FindWindowExA,'FindWindowExA',\
         FindWindow,'FindWindowA',\
         SendMessageA,'SendMessageA'
 
  import gdi,\
         CreateFontIndirectA,'CreateFontIndirectA',\
         DeleteObject,'DeleteObject'