| 1234567891011121314151617181920212223242526272829 |
- #include <windows.h>
- //FindDotNet
- typedef NTSTATUS (NTAPI * NtGetNextProcess_t)(HANDLE ProcessHandle, ACCESS_MASK DesiredAccess, ULONG HandleAttributes, ULONG Flags, PHANDLE NewProcessHandle);
- typedef NTSTATUS (NTAPI * NtOpenSection_t)(PHANDLE SectionHandle, ACCESS_MASK DesiredAccess, POBJECT_ATTRIBUTES ObjectAttributes);
- DECLSPEC_IMPORT DWORD WINAPI KERNEL32$GetProcessId(HANDLE Process);
- //WINBASEAPI void *__cdecl MSVCRT$memcpy(void *Dst, const void *Src, size_t MaxCount);
- WINBASEAPI size_t __cdecl MSVCRT$wcslen(const wchar_t *_Str);
- //WINBASEAPI LPVOID WINAPI KERNEL32$HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes);
- WINBASEAPI int __cdecl MSVCRT$printf(const char * _Format,...);
- DECLSPEC_IMPORT int WINAPI USER32$wsprintfW(LPWSTR unnamedParam1, LPCWSTR unnamedParam2, ...);
- //WINBASEAPI void __cdecl MSVCRT$memset(void *dest, int c, size_t count);
- DECLSPEC_IMPORT DWORD WINAPI KERNEL32$K32GetProcessImageFileNameA(HANDLE hProcess, LPSTR lpImageFileName, DWORD nSize);
- DECLSPEC_IMPORT LPCSTR WINAPI SHLWAPI$PathFindFileNameA(LPCSTR pszPath);
- DECLSPEC_IMPORT LPWSTR WINAPI KERNEL32$lstrcatW (LPWSTR lpString1, LPCWSTR lpString2);
- DECLSPEC_IMPORT BOOL WINAPI KERNEL32$CloseHandle (HANDLE hObject);
- //WINBASEAPI HANDLE WINAPI KERNEL32$GetProcessHeap();
- DECLSPEC_IMPORT int WINAPI KERNEL32$MultiByteToWideChar(UINT CodePage, DWORD dwFlags, _In_NLS_string_(cbMultiByte)LPCCH lpMultiByteStr, int cbMultiByte, LPWSTR lpWideCharStr, int cchWideChar);
- //bofstart + internal_printf + printoutput
- WINBASEAPI void *__cdecl MSVCRT$calloc(size_t number, size_t size);
- WINBASEAPI int WINAPI MSVCRT$vsnprintf(char* buffer, size_t count, const char* format, va_list arg);
- WINBASEAPI void __cdecl MSVCRT$memset(void *dest, int c, size_t count);
- WINBASEAPI void* WINAPI MSVCRT$memcpy(void* dest, const void* src, size_t count);
- WINBASEAPI HANDLE WINAPI KERNEL32$GetProcessHeap();
- WINBASEAPI LPVOID WINAPI KERNEL32$HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes);
- WINBASEAPI void __cdecl MSVCRT$free(void *memblock);
- WINBASEAPI BOOL WINAPI KERNEL32$HeapFree(HANDLE, DWORD, PVOID);
|