1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
| #include <windows.h>
#define BYN 1111
#define BTN 0x0000012
#define BTN2 0x0000013
/* Declare Windows procedure */
LRESULT CALLBACK WindowProcedure (HWND, UINT, WPARAM, LPARAM);
/* Make the class name into a global variable */
char szClassName[ ] = "WindowsApp";
char q[1000000]={0};
char vivod[100000000]={0};
char zap[]=",";
int t=0;
HWND hListBox;
HINSTANCE hin;
char buf[10000];
char name[]="MyDll.dll";
BOOL SetDebugPrivileges();
int WINAPI WinMain (HINSTANCE hThisInstance,
HINSTANCE hPrevInstance,
LPSTR lpszArgument,
int nFunsterStil)
{
HWND hwnd; /* This is the handle for our window */
MSG messages; /* Here messages to the application are saved */
WNDCLASSEX wincl; /* Data structure for the windowclass */
/* The Window structure */
wincl.hInstance = hThisInstance;
wincl.lpszClassName = szClassName;
wincl.lpfnWndProc = WindowProcedure; /* This function is called by windows */
wincl.style = CS_DBLCLKS; /* Catch double-clicks */
wincl.cbSize = sizeof (WNDCLASSEX);
hin=hThisInstance;
/* Use default icon and mouse-pointer */
wincl.hIcon = LoadIcon (NULL, IDI_APPLICATION);
wincl.hIconSm = LoadIcon (NULL, IDI_APPLICATION);
wincl.hCursor = LoadCursor (NULL, IDC_ARROW);
wincl.lpszMenuName = NULL; /* No menu */
wincl.cbClsExtra = 0; /* No extra bytes after the window class */
wincl.cbWndExtra = 0; /* structure or the window instance */
/* Use Windows's default color as the background of the window */
wincl.hbrBackground = (HBRUSH) COLOR_BACKGROUND;
/* Register the window class, and if it fails quit the program */
if (!RegisterClassEx (&wincl))
return 0;
/* The class is registered, let's create the program*/
hwnd = CreateWindowEx (
0, /* Extended possibilites for variation */
szClassName, /* Classname */
"Из ListBox в Edit", /* Title Text */
WS_SYSMENU, /* default window */
0, /* Windows decides the position */
0, /* where the window ends up on the screen */
707, /* The programs width */
160, /* and height in pixels */
HWND_DESKTOP, /* The window is a child-window to desktop */
NULL, /* No menu */
hThisInstance, /* Program Instance handler */
NULL /* No Window Creation data */
);
/* Make the window visible on the screen */
ShowWindow (hwnd, SW_SHOW);
/* Run the message loop. It will run until GetMessage() returns 0 */
while (GetMessage (&messages, NULL, 0, 0))
{
/* Translate virtual-key messages into character messages */
TranslateMessage(&messages);
/* Send message to WindowProcedure */
DispatchMessage(&messages);
}
/* The program return-value is 0 - The value that PostQuitMessage() gave */
return messages.wParam;
}
/* This function is called by the Windows function DispatchMessage() */
LRESULT CALLBACK WindowProcedure (HWND hwnd, UINT message, WPARAM wParam, LPARAM lParam)
{
static HBITMAP hBitmap;
PAINTSTRUCT ps;
HWND Edit;
HWND hButton;
HWND hwn;
HWND hw=GetDesktopWindow();
HDC hdc;
HWND hwN;
static int wmId, wmEvent;
static int number;
static int number2;
static int number3;
static char q2[100000]={0};
switch (message) /* handle the messages */
{
case WM_CREATE:
Edit = CreateWindowEx( WS_EX_CLIENTEDGE, "Edit", "",
ES_AUTOHSCROLL | WS_CHILD | WS_VISIBLE,
0, 100, 700, 25,hwnd, (HMENU)BTN, hin, NULL );
hListBox=CreateWindow("LISTBOX","",WS_CHILD|WS_VISIBLE|LBS_NOTIFY|
WS_VSCROLL,0,0,700,80,hwnd,(HMENU)1111,hin,NULL);
hw=GetWindow(hw,GW_CHILD);
GetWindowTextA(hw,q,100);
number2=strlen(q);
if(number2!=0){
SendMessage(hListBox,LB_ADDSTRING,0,(LPARAM)q);
}
for(;;){
hw=GetWindow(hw,GW_HWNDNEXT);
if(hw==FALSE){
break;}
GetWindowTextA(hw,q,1000000);
number2=strlen(q);
if(number2!=0){
SendMessage(hListBox,LB_ADDSTRING,0,(LPARAM)q);
}
}
case WM_CTLCOLOREDIT:
SetBkMode((HDC)wParam,TRANSPARENT);
SetTextColor( (HDC)wParam, RGB( 0, 255, 0 ) );
return (LRESULT)CreateSolidBrush(RGB(0,0,0));
break;
break;
case WM_COMMAND:
wmId = LOWORD(wParam);
wmEvent = HIWORD(wParam);
switch (wmId)
{
case 1111:
if (wmEvent == LBN_DBLCLK)
{
number=SendMessage(hListBox,LB_GETCURSEL,0,wParam);
SendMessage(hListBox,LB_GETTEXT,(WPARAM)number,(LPARAM)q);
hwn=hwnd;
hwn=GetWindow(hwn,GW_CHILD);
SetWindowText (hwn, q);
SetDebugPrivileges();
HANDLE hProc; HANDLE hMMF,EventServ,EventClient;
HANDLE hTR;
LPVOID cmtmem;PBYTE pView;
DWORD pid ,f;
HWND h;
h=FindWindowA(NULL,q);
GetWindowThreadProcessId(h, &pid);
hProc=OpenProcess(PROCESS_ALL_ACCESS,FALSE,pid);
cmtmem=VirtualAllocEx(hProc,NULL,strlen(name)+1,MEM_COMMIT|MEM_RESERVE,PAGE_EXECUTE_READWRITE);
hMMF=CreateFileMappingA(INVALID_HANDLE_VALUE,NULL,PAGE_READWRITE,0,1024,"InjecterMMF");
pView=(PBYTE)MapViewOfFile(hMMF,FILE_MAP_READ|FILE_MAP_WRITE,0,0,0);
EventServ=CreateEventA(NULL,FALSE,FALSE,"ServEvent");
EventClient=CreateEventA(NULL,FALSE,FALSE,"CliEvent");
if(WriteProcessMemory(hProc,cmtmem,name,strlen(name)+1,NULL))
{
LPTHREAD_START_ROUTINE pfnLoad=(LPTHREAD_START_ROUTINE)GetProcAddress(GetModuleHandleA("kernel32.dll"),"LoadLibraryA");
hTR=CreateRemoteThread(hProc,NULL,0,pfnLoad,cmtmem,0,NULL);
}
}
break;
}
break;
case WM_DESTROY:
PostQuitMessage (0); /* send a WM_QUIT to the message queue */
break;
default: /* for messages that we don't deal with */
return DefWindowProc (hwnd, message, wParam, lParam);
}
return 0;
}
BOOL SetDebugPrivileges()
{
TOKEN_PRIVILEGES tp;
LUID luid;
HANDLE hToken;
if(!OpenProcessToken(GetCurrentProcess(),TOKEN_READ|TOKEN_ADJUST_PRIVILEGES,&hToken))
{return FALSE;}
if(!LookupPrivilegeValueA(NULL,"SeDebugPrivilege",&luid))
{CloseHandle(hToken);return FALSE;}
tp.PrivilegeCount=1;
tp.Privileges[0].Luid=luid;
tp.Privileges[0].Attributes=SE_PRIVILEGE_ENABLED;
if(!AdjustTokenPrivileges(hToken,FALSE,&tp,NULL,NULL,NULL))
{CloseHandle(hToken);return FALSE;}
CloseHandle(hToken);
return TRUE;
} |
, так вот вопрос с чего она вообще куда то делась , прикрепляю скрин до и после
(
Сообщение было отмечено volvo как решение
Сообщение от Игорь с++
