mgostih

Show Every Loaded DLLs (to inject)

Feb 20th, 2016
224
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #include "main.h" // main.h on http://pastebin.com/vbB50sS2
  2.  
  3. // a sample exported function
  4. using namespace std;
  5. string banana = "Hello";
  6. HINSTANCE MyHandle;
  7. void RealMain()
  8. {
  9.     HMODULE modules[1024];
  10.     DWORD M_Needed;
  11.     char buff [MAX_PATH];
  12.     DisableThreadLibraryCalls(MyHandle);
  13.     AllocConsole();
  14.     freopen("CONIN$", "r", stdin);
  15.     freopen("CONOUT$", "w", stdout);
  16.     freopen("CONOUT$", "w", stderr);
  17.     SetConsoleTitle("Console");
  18.     SetConsoleTextAttribute(GetStdHandle(STD_OUTPUT_HANDLE), FOREGROUND_RED | FOREGROUND_GREEN | FOREGROUND_BLUE);
  19.     cout <<banana.length()<<endl;
  20.     cin.get();
  21.     EnumProcessModules(GetCurrentProcess(),modules,sizeof(modules),&M_Needed);
  22.     for(int i = 0;i<(M_Needed/sizeof(HMODULE));i++){
  23.         if (GetModuleBaseName(GetCurrentProcess(),modules[i],buff,sizeof(buff))&&(modules[i]!=MyHandle)){
  24.             printf("%i\t| %08X : %s\n",i,modules[i],buff);
  25.         }
  26.     }
  27.     system("PAUSE>NULL");
  28.     FreeConsole();
  29.     FreeLibraryAndExitThread(MyHandle, 0);
  30. }
  31.  
  32. extern "C" DLL_EXPORT BOOL APIENTRY DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
  33. {
  34.     switch (fdwReason)
  35.     {
  36.         case DLL_PROCESS_ATTACH:
  37.             MyHandle = hinstDLL;
  38.             CreateThread(0,0,(LPTHREAD_START_ROUTINE)RealMain,0,0,0);
  39.             break;
  40.  
  41.         case DLL_PROCESS_DETACH:
  42.             // detach from process
  43.             break;
  44.  
  45.         case DLL_THREAD_ATTACH:
  46.             // attach to thread
  47.             break;
  48.  
  49.         case DLL_THREAD_DETACH:
  50.             // detach from thread
  51.             break;
  52.     }
  53.     return TRUE; // succesful
  54. }
Add Comment
Please, Sign In to add comment