AHK: список модулей процесса

MsgBox, % PsListModules("explorer.exe")     ; Только имена модулей.
MsgBox, % PsListModules("explorer.exe", 1)  ; С полными путями. MsgBox может обрезать список, т.к. макс. объём её текста ограничен.

PsListModules(Process, ShowPath = 0)    ; Process = PID or Name.exe.
{
    static StructSize, NameOffset, PathOffset, MODULEENTRY32
    static FLAGS := 0x18        ; TH32CS_SNAPMODULE | TH32CS_SNAPMODULE32
    static INVALID_HANDLE_VALUE := -1, ERROR_PARTIAL_COPY := 299
    If (!StructSize) {
        If (A_PtrSize = 8) {
            StructSize := 1080, NameOffset := 48, PathOffset := 560
        } Else {
            StructSize := 1064, NameOffset := 32, PathOffset := 544
        }
        VarSetCapacity(MODULEENTRY32, StructSize, 0)
        NumPut(StructSize, MODULEENTRY32, 0, "uint")
    }
    Process, Exist, %Process%
    If (ErrorLevel = 0) {
        MsgBox, Процесс не найден: %Process%
        Return 0
    }
    hSnapshot := DllCall("CreateToolhelp32Snapshot", "uint", FLAGS
                                                   , "uint", ErrorLevel
                                                   , "ptr")
    If (hSnapshot = INVALID_HANDLE_VALUE) {
        If (A_LastError = ERROR_PARTIAL_COPY) {
            MsgBox, Ошибка: битность процесса выше битности скрипта.
        } Else {
            MsgBox, Ошибка CreateToolhelp32Snapshot: %A_LastError%
        }
        Return 0
    }
    List := 0
    pszModule := ShowPath ? &MODULEENTRY32 + PathOffset : &MODULEENTRY32 + NameOffset
    If DllCall("Module32FirstW", "ptr", hSnapshot, "ptr", &MODULEENTRY32) {
        List := StrGet(pszModule, "utf-16")
        While DllCall("Module32NextW", "ptr", hSnapshot, "ptr", &MODULEENTRY32) {
            List .= " " . StrGet(pszModule, "utf-16")
        }
    }
    DllCall("CloseHandle", "ptr", hSnapshot)
    Return List
}

a .= b
a := a . b

MsgBox, % PsListModules("explorer.exe")

PsListModules(Process)  ; Process = PID or Name.exe
{
    static ModulePath, cchModulePath = 260  ; MAX_PATH
    If (!ModulePath) {
        cbModulePath := A_IsUnicode ? cchModulePath * 2 : cchModulePath
        VarSetCapacity(ModulePath, cbModulePath, 0)
    }
    Process, Exist, %Process%
    If (ErrorLevel = 0) {
        MsgBox, Процесс не найден: %Process%
        Return
    }
    If !(hProcess := DllCall("OpenProcess"
            , "uint", 0x410     ; PROCESS_QUERY_INFORMATION | PROCESS_VM_READ
            , "int", 0
            , "uint", ErrorLevel
            , "ptr")) {
        MsgBox, Ошибка OpenProcess: %A_LastError%
        Return
    }
    cbHandles := 100 * A_PtrSize
HandleArraySize:
    VarSetCapacity(Handles, cbHandles, 0)
    If !DllCall("Psapi.dll\EnumProcessModulesEx"
            , "ptr", hProcess
            , "ptr", &Handles
            , "uint", cbHandles
            , "uint *", cbNeeded
            , "uint", 3) {          ; LIST_MODULES_ALL
        If (A_LastError = 299) {    ; ERROR_PARTIAL_COPY
            MsgBox, Ошибка: битность процесса выше битности скрипта.
        } Else {
            MsgBox, Ошибка EnumProcessModulesEx: %A_LastError%
        }
        DllCall("CloseHandle", "ptr", hProcess)
        Return
    }
    If (cbNeeded > cbHandles) {
        cbHandles += 50 * A_PtrSize
        Goto, HandleArraySize
    }
    Loop, % cbNeeded // A_PtrSize
    {
        If !DllCall("Psapi.dll\GetModuleFileNameEx"
                , "ptr", hProcess
                , "ptr", NumGet(Handles, (A_Index - 1) * A_PtrSize, "ptr")
                , "ptr", &ModulePath
                , "uint", cchModulePath) {
            MsgBox, Ошибка GetModuleFileNameEx: %A_LastError%
            DllCall("CloseHandle", "ptr", hProcess)
            Return
        }
        List .= StrGet(&ModulePath) . " "
    }
    DllCall("CloseHandle", "ptr", hProcess)
    Return List
}

#AutoIt3Wrapper_UseUpx=n
#AutoIt3Wrapper_UseX64=n

#RequireAdmin
#include <GUIConstants.au3>

GUICreate("Beispiel", 275, 100)
GUISetBkColor(0xFFFFFF)
GUICtrlCreateLabel("Prozess:", 10, 10, 50, 17)
$I_ProcessName = GUICtrlCreateInput("", 65, 10, 200, 21)
GUICtrlCreateLabel("DLL:", 10, 40, 50, 17)
$I_DllPath = GUICtrlCreateInput("", 65, 40, 150, 21)
$B_SearchDll = GUICtrlCreateButton("...", 225, 40, 40, 25)
$R_Auto = GUICtrlCreateRadio("Automatisch", 10, 75, 75, 17)
GUICtrlSetState(-1, $GUI_CHECKED)
$R_Man = GUICtrlCreateRadio("Manuell", 130, 75, 55, 17)
$B_Inject = GUICtrlCreateButton("Injizieren", 190, 70, 75, 25)
GUICtrlSetState(-1, $GUI_DISABLE)
GUISetState()

$Injected = False

Do
    $Msg = GUIGetMsg()
    Switch $Msg
        Case $B_SearchDll
            GUICtrlSetData($I_DllPath, FileOpenDialog("Dll", @HomeDrive, "Dynamic Link Library (*.dll)", 3))
        Case $R_Auto
            GUICtrlSetState($B_Inject, $GUI_DISABLE)
        Case $R_Man
            GUICtrlSetState($B_Inject, $GUI_ENABLE)
        Case $B_Inject
            _InjectDll(ProcessExists(GUICtrlRead($I_ProcessName)), GUICtrlRead($I_DllPath))
            _Message(@error)
    EndSwitch

    If BitAND(GUICtrlRead($R_Auto), $GUI_CHECKED) And Not $Injected Then
        $ProcessId = ProcessExists(GUICtrlRead($I_ProcessName))
        If $ProcessId > 0 Then
            _InjectDll($ProcessId, GUICtrlRead($I_DllPath))
            _Message(@error)
            $Injected = True
            ;Exit
        EndIf
    EndIf

    Sleep(10)
Until $Msg == $GUI_EVENT_CLOSE



Func _Message($ErrorCode)
    If $ErrorCode <> 0 Then
        MsgBox(48, "Fehler", "Es ist ein Fehler aufgetreten!" & @CRLF & "Fehlercode: " & @error)
    Else
        MsgBox(64, "Info", "Injektion erfolgreich!")
    EndIf
EndFunc


;=================================================================================================
; Function:            _InjectDll($ProcessId, $DllPath)
; Description:        Injects a .dll into a running program.
; Return Value(s):    On Success - Returns true
;                    On Failure - Returns false
;                    @Error - 0 = No error.
;                             1 = Invalid ProcessId.
;                             2 = File does not exist.
;                             3 = File is not a .dll (invalid file).
;                             4 = Failed to open 'Advapi32.dll'.
;                             5 = Failed to get the full path.
;                             6 = Failed to open the process.
;                             7 = Failed to call 'GetModuleHandle'.
;                             8 = Failed to call 'GetProcAddress'.
;                             9 = Failed to call 'VirtualAllocEx'.
;                             10 = Failed to write the memory.
;                             11 = Failed to create the 'RemoteThread'.
; Author(s):        KillerDeluxe
;=================================================================================================

Func _InjectDll($ProcessId, $DllPath)
    If $ProcessId == 0 Then Return SetError(1, "", False)
    If Not(FileExists($DllPath)) Then Return SetError(2, "", False)
    If Not(StringRight($DllPath, 4) == ".dll") Then Return SetError(3, "", False)

    $Kernel32 = DllOpen("kernel32.dll")
    If @error Then Return SetError(4, "", False)

    $DLL_Path = DllStructCreate("char[255]")
    DllCall($Kernel32, "DWORD", "GetFullPathNameA", "str", $DllPath, "DWORD", 255, "ptr", DllStructGetPtr($DLL_Path), "int", 0)
    If @error Then Return SetError(5, "", False)

    $hProcess = DllCall($Kernel32, "DWORD", "OpenProcess", "DWORD", 0x1F0FFF, "int", 0, "DWORD", $ProcessId)
    If @error Then Return SetError(6, "", False)

    $hModule = DllCall($Kernel32, "DWORD", "GetModuleHandleA", "str", "kernel32.dll")
    If @error Then Return SetError(7, "", False)

    $lpStartAddress = DllCall($Kernel32, "DWORD", "GetProcAddress", "DWORD", $hModule[0], "str", "LoadLibraryA")
    If @error Then Return SetError(8, "", False)

    $lpParameter = DllCall($Kernel32, "DWORD", "VirtualAllocEx", "int", $hProcess[0], "int", 0, "ULONG_PTR", DllStructGetSize($DLL_Path), "DWORD", 0x3000, "int", 4)
    If @error Then Return SetError(9, "", False)

    DllCall("kernel32.dll", "BOOL", "WriteProcessMemory", "int", $hProcess[0], "DWORD", $lpParameter[0], "str", DllStructGetData($DLL_Path, 1), "ULONG_PTR", DllStructGetSize($DLL_Path), "int", 0)
    If @error Then Return SetError(10, "", False)

    $hThread = DllCall($Kernel32, "int", "CreateRemoteThread", "DWORD", $hProcess[0], "int", 0, "int", 0, "DWORD", $lpStartAddress[0], "DWORD", $lpParameter[0], "int", 0, "int", 0)
    If @error Then Return SetError(11, "", False)

    DllCall($Kernel32, "BOOL", "CloseHandle", "DWORD", $hProcess[0])
    DllClose($Kernel32)

    Return SetError(0, "", True)
EndFunc