// Library Injector v1.0 - yeikos (at) gmail (dot) com		
// GNU General Public License - http://www.gnu.org/licenses/gpl-3.0.txt
 
#include <windows.h>
#include <tlhelp32.h>
 
#define MAX_PID 6
 
int fncHelp() { 
    printf("\n\t[INFO]\n"
	"\t  -a\t\t\tShows every process id with his process name respective\n"
	"\t  -s <process name>\tShows every process id from the process name\n\n"
	"\t[INJECT]\n"
	"\t  -l <library>\t\tLoads the library for the injection\n"
	"\t  -n <process name>\tInjects the library in all process id from the process name\n"
	"\t  -i <process id>\tInjects the library in the process id\n\n"
	"\n\t  Usage: li.exe [[-a]|[-s]] [-l [-n]|[-i]]\n"); exit(1); 
}
 
char strLibrary[MAX_PATH], strPName[MAX_PATH], strShow[MAX_PATH], strPID[MAX_PID];
unsigned short int i, optAll = 0, optShow = 0, optLibrary = 0, optPID= 0, optPName= 0;
 
int main(int argc, char **argv)
{
	printf ("\n      Library Injector v1.0 - yeikos (at) gmail (dot) com\n\n");
 
	if (argc < 2) { fncHelp(); }
 
	for (i=1;i<argc;i+=2) {
		switch((int)argv[i][1]) {                   
			case 'a': if (optAll > 0 || argc != 2) { fncHelp(); } else { optAll = i+1; } break;    
			case 's': if (optShow > 0 || argc != 3) { fncHelp(); } else { optShow = i+1; } break;   
			case 'l': if (optLibrary > 0 || argc != 5) { fncHelp(); } else { optLibrary = i+1; } break;   
			case 'i': if (optPID > 0 || argc != 5 || strlen(argv[i+1]) > MAX_PID ) { fncHelp(); } else { optPID = i+1; } break;  
			case 'n': if (optPName > 0 || argc != 5) { fncHelp(); } else { optPName = i+1; } break;     
			default: fncHelp(); break;
		}
	}
 
	HANDLE hProcessSnap;
	PROCESSENTRY32 pe32;
	hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
	pe32.dwSize = sizeof(PROCESSENTRY32);
 
	if (optAll > 0 || optShow > 0) { printf("\tID\t Name\n\t--       ----\n"); }
 
	if (!Process32First(hProcessSnap,&pe32)) {
		CloseHandle(hProcessSnap);
	} do {
 
		if (optAll > 0) {
                   if (pe32.th32ProcessID != 0) {
			printf("\t[%i]\t %s\n", pe32.th32ProcessID, pe32.szExeFile);
        }
		} else if (optShow > 0) {
			strncpy(strShow, argv[optShow], sizeof(strShow));
 
			if (strcmp(strShow,pe32.szExeFile) == 0) {
				printf("\t[%i]\t %s\n", pe32.th32ProcessID, pe32.szExeFile);
			}
 
		} else if (optLibrary > 0) {
			strncpy(strLibrary, argv[optLibrary], sizeof(strLibrary));
			char tmpPID[MAX_PID]; sprintf(tmpPID, "%i", pe32.th32ProcessID);
 
			if (optPName > 0) {
				strncpy(strPName, argv[optPName], sizeof(strPName));
 
				if (strcmp(strPName,pe32.szExeFile) == 0) {
					sprintf(strPID, "%i", pe32.th32ProcessID); 
				}
 
			} else if (optPID > 0) {
 
				if (strcmp(argv[optPID],tmpPID) == 0) {
					strncpy(strPName, pe32.szExeFile, sizeof(strPName));
					strncpy(strPID, argv[optPID], sizeof(strPID));
				}
 
			}
 
			if (strcmp(strPID,tmpPID) == 0) {
				DWORD pid; pid=(DWORD)atoi(tmpPID);
				HANDLE proc;
				LPVOID RemoteString;
				LPVOID nLoadLibrary;
				proc = OpenProcess(PROCESS_ALL_ACCESS, 0, pid);
				nLoadLibrary = (LPVOID)GetProcAddress(GetModuleHandle("kernel32.dll"), "LoadLibraryA");
				RemoteString = (LPVOID)VirtualAllocEx(proc,0,strlen(strLibrary),MEM_COMMIT|MEM_RESERVE,PAGE_READWRITE);
				WriteProcessMemory(proc,(LPVOID)RemoteString,strLibrary,strlen(strLibrary),0);
				CreateRemoteThread(proc,0,0,(LPTHREAD_START_ROUTINE)nLoadLibrary,(LPVOID)RemoteString,0,0);   
				CloseHandle(proc);
				printf("\t%s >> %s [%s]\n",strLibrary,strPName,tmpPID);
			}
		}
	}
 
	while(Process32Next(hProcessSnap, &pe32));
	CloseHandle(hProcessSnap);
 
	if ((optLibrary > 0) && (strlen(strPName) == 0 || strlen(strPID) == 0)) { printf("\n\tResults (0)\n"); }
 
	return 0;
}