VOID GetCurrentModuleName(char *szModuleName)
{
 int i;
 int len;
 int cnt = 0,cnt2 = 0;
 static char Buffer[MAX_PATH];

 GetModuleFileName(GetModuleHandle(0),Buffer,MAX_PATH);
 
 for(i = 0; i < strlen(Buffer); i++)
 {
  if(Buffer[i] == '\\')
  {
   cnt++;
  }
 }

 for(i = 0; i < strlen(Buffer); i++)
 {
  if(Buffer[i] == '\\')
  {
   cnt2++;
   if(cnt == cnt2)
   {
    len = strlen(&Buffer[i+1]);
    strcpy(szModuleName,&Buffer[i+1]);
    szModuleName[len] = 0;
   }
  }
 }
}


//--------------------------------------------------------------------
#define XPSP2_PEB_LDR_OFFSET   0x00C

typedef struct _UNICODE_STRING {
    USHORT Length;
    USHORT MaximumLength;
    PWSTR  Buffer;
} UNICODE_STRING;
typedef UNICODE_STRING *PUNICODE_STRING;


typedef struct _PEB_LDR_DATA
{
  ULONG                   Length;
  ULONG       Initialized;
  PVOID                   SsHandle;
  LIST_ENTRY              InLoadOrderModuleList;  
  LIST_ENTRY              InMemoryOrderModuleList;    
  LIST_ENTRY              InInitializationOrderModuleList;
} PEB_LDR_DATA, *PPEB_LDR_DATA;


typedef struct _LDR_MODULE
{
  LIST_ENTRY              InLoadOrderModuleList;
  LIST_ENTRY              InMemoryOrderModuleList;
  LIST_ENTRY              InInitializationOrderModuleList;

  PVOID                   BaseAddress;
  PVOID                   EntryPoint;
  ULONG                   SizeOfImage;
  UNICODE_STRING          FullDllName;
  UNICODE_STRING          BaseDllName;
  ULONG                   Flags;
  SHORT                   LoadCount;
  SHORT                   TlsIndex;
  LIST_ENTRY              HashTableEntry;
  ULONG                   TimeDateStamp;
} LDR_MODULE, *PLDR_MODULE;

VOID GetCurrentModuleName2(char *szModuleName)
{
 DWORD *PEB;
 PPEB_LDR_DATA Ldr;
 PLIST_ENTRY pLE,InitOrderMod;
 PLDR_MODULE pLdrModule;
 UNICODE_STRING Uni_Module;

 __asm
 {
  mov eax,fs:0x30
  mov PEB,eax
 }
 
 Ldr = (PPEB_LDR_DATA)*(DWORD *)((char *)PEB + XPSP2_PEB_LDR_OFFSET);

 pLE = Ldr->InLoadOrderModuleList.Flink;

 InitOrderMod = pLE->Blink;

 pLdrModule = CONTAINING_RECORD(pLE,LDR_MODULE,InLoadOrderModuleList);

 if(pLdrModule)
 {
  WideCharToMultiByte(CP_ACP,
         0, 
         pLdrModule->BaseDllName.Buffer,
         pLdrModule->BaseDllName.Length,
         szModuleName,
         16,
         0,
         0);  
 }
 
}

이올린에 북마크하기

Posted by Dual

2007/07/31 04:52 2007/07/31 04:52
Response
2 Trackbacks , 14 Comments
RSS :
http://dual5651.hacktizen.com/tc/rss/response/300

Trackback URL : http://dual5651.hacktizen.com/tc/trackback/300

Trackbacks List

  1. Casino 1276715712

    Tracked from Casino 1276715712 2010/06/18 06:02 Delete

    Casino 1276715712

  2. Funn Fatboy Riser Bar

    Tracked from Funn Fatboy Riser Bar 2012/03/21 08:59 Delete

Comments List

  1. 30th birthday party 2011/05/11 16:57 # M/D Reply Permalink

    Our casino party hire means that you don’t risk a dud party! Blackjack Knights provides a fun casino party night in Melbourne

    and Adelaide.<a href="www.blackjackknights.com.au"> 30th birthday party ideas Perth</a>

  2. Designer Bags 2012/04/25 00:36 # M/D Reply Permalink

    women handbags http://www.womens-bags.org

  3. Designer Bags 2012/04/25 00:36 # M/D Reply Permalink

    women handbags http://www.womens-bags.org

  4. Karen Millen Outlet 2012/04/25 00:37 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  5. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  6. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  7. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  8. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  9. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  10. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  11. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  12. Karen Millen Outlet 2012/04/25 00:38 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  13. Karen Millen Outlet 2012/04/25 00:39 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

  14. Karen Millen Outlet 2012/04/25 19:18 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

Leave a comment
http://www.codeproject.com/cpp/peprotector1.asp

-_-;; 친절하게 코드 설명도 해주는군...
이올린에 북마크하기

Posted by Dual

2007/07/31 02:39 2007/07/31 02:39
Response
9 Trackbacks , 5 Comments
RSS :
http://dual5651.hacktizen.com/tc/rss/response/299

Trackback URL : http://dual5651.hacktizen.com/tc/trackback/299

Trackbacks List

  1. panzer iv model diorama

    Tracked from panzer iv model diorama 2009/07/28 03:26 Delete

    animal loving farm girls <a href="http://sexoasis74.5gighost.com/animal-loving-farm-girls.html">animal loving farm girls</a>

  2. zeps bbs

    Tracked from zeps bbs 2009/07/29 15:32 Delete

    tawas phone system <a href="http://maifunemae.wordpress.com/">tawas phone system</a>

  3. zero turn lawn mowers

    Tracked from zero turn lawn mowers 2009/07/29 16:21 Delete

    tawas business analysis <a href="http://vatzefak.wordpress.com/">tawas business analysis</a>

  4. Margot Kidder Nude

    Tracked from Margot Kidder Nude 2009/08/18 01:55 Delete

    Margot Kidder Nude <a href="http://www.kaboodle.com/margot_kidder_nude_52">Margot Kidder Nude</a> Photos and Video. jgr1uig98d

  5. natassia malthe nude

    Tracked from natassia malthe nude 2009/08/19 20:32 Delete

    jesse james rims <a href="http://www.kaboodle.com/jesse_james_rims_13">jesse james rims </a> shannon whirry breasts <a href="http://www.kaboodle.com/shannon_whirry_breasts_6">shannon whirry breasts</a>

  6. peri gilpin nude

    Tracked from peri gilpin nude 2009/08/27 16:48 Delete

    emily osment nude <a href="http://www.kaboodle.com/emily_osment_nude_7">emily osment nude</a>

  7. Operation Flashpoint-dragon Raising 1gb

    Tracked from Operation Flashpoint-dragon Raising 1gb 2009/12/15 20:40 Delete

    Geargrinder (pc/2009) Multi 5 Full <a href="http://rspost.blogetery.com/games/geargrinder-pc2009-multi-5-full.html">Geargrinder (pc/2009) Multi 5 Full</a>

  8. Funn Fatboy Dh Riser Bar

    Tracked from Funn Fatboy Dh Riser Bar 2012/01/03 08:22 Delete

  9. Funn Fatboy Riser Bar

    Tracked from Funn Fatboy Riser Bar 2012/05/20 18:00 Delete

Comments List

  1. Nike Air Max for Sal 2011/08/29 17:50 # M/D Reply Permalink

    555clf4
    very gpod

  2. Air Jordans 2011/08/29 17:52 # M/D Reply Permalink

    555clf1
    thanjks for you

  3. Beats by dre 2012/02/10 18:16 # M/D Reply Permalink

    Beats By Dre is cheap.

  4. Designer Bags 2012/04/25 00:20 # M/D Reply Permalink

    http://www.womens-bags.org

  5. Karen Millen Outlet 2012/04/25 13:01 # M/D Reply Permalink

    Karen Millen Outlet http://www.km-outlet.com

Leave a comment

블로그 이미지

슬픔 메아리쳐, 난 너무도 약했어..

- Dual

Notices

Archives

Authors

  1. Dual

Calendar

«   2007/07   »
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30 31        

Site Stats

Total hits:
98779
Today:
59
Yesterday:
165