# korneevscp/shadow-demon-v1.0.exe architecture

> Architecture diagram of the GitHub repository korneevscp/shadow-demon-v1.0.exe, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-11-10). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/korneevscp/shadow-demon-v1.0.exe
- Repository: https://github.com/korneevscp/shadow-demon-v1.0.exe

## Overview

This is a small Win32 laboratory utility: the user enters a process name, selects a DLL, and clicks Inject; the GUI looks up the process and reports the result of attempting DLL injection. The single C source implements the UI, process lookup, and injection logic. The graph follows the documented interaction and the excerpted calls; the repository has no separate runtime modules.

Main entry points: [`shadow Demon V1.0.c`](https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c) (GUI and events)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_ui["Win32 interface"]
  node_gui["GUI and events"]
  node_browse["DLL file picker"]
end

subgraph group_runtime["Injection runtime"]
  node_lookup["Process lookup"]
  node_inject["Remote DLL loading"]
end

node_user(("Operator"))
node_target["Target process"]

node_user -->|"enters details"| node_gui
node_gui -->|"opens picker"| node_browse
node_browse -->|"sets DLL path"| node_gui
node_gui -->|"looks up PID"| node_lookup
node_gui -->|"requests injection"| node_inject
node_lookup -->|"finds by name"| node_target
node_inject -->|"loads DLL remotely"| node_target
node_gui -->|"shows status"| node_user

click node_gui "https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c"
click node_browse "https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c"
click node_lookup "https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c"
click node_inject "https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_gui,node_browse toneBlue
class node_lookup,node_inject toneAmber
class node_user,node_target toneIndigo
```

## Components

### Win32 interface

- [GUI and events](https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c): `shadow Demon V1.0.c`
- [DLL file picker](https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c): `shadow Demon V1.0.c`

### Injection runtime

- [Process lookup](https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c): `shadow Demon V1.0.c`
- [Remote DLL loading](https://github.com/korneevscp/shadow-demon-v1.0.exe/blob/main/shadow%20Demon%20V1.0.c): `shadow Demon V1.0.c`

### Other components

- **Operator**
- **Target process**

## Connections

- Operator → GUI and events: enters details (evidence: `README.md`)
- GUI and events → DLL file picker: opens picker (evidence: `shadow Demon V1.0.c`)
- DLL file picker → GUI and events: sets DLL path (evidence: `shadow Demon V1.0.c`)
- GUI and events → Process lookup: looks up PID (evidence: `shadow Demon V1.0.c`)
- GUI and events → Remote DLL loading: requests injection (evidence: `shadow Demon V1.0.c`)
- Process lookup → Target process: finds by name (evidence: `shadow Demon V1.0.c`)
- Remote DLL loading → Target process: loads DLL remotely (evidence: `shadow Demon V1.0.c`)
- GUI and events → Operator: shows status (evidence: `shadow Demon V1.0.c`)