2012年3月16日
Win32 遍历导入表
摘要： 1 .386 2 .model flat,stdcall 3 option casemap:none 4 5 include Windows.inc 6 include User32.inc 7 include Kernel32.inc 8 includelib User32.lib 9 includelib Kernel32.lib 10 11 .data 12 hMainHandle dd ? 13 hFile dd ? 14 nSize dd ? 15 hMap dd ? 16 hMapBase dd ? 17 hReturnAddre... 阅读全文
posted @ 2012-03-16 16:42 nXqaL 阅读(331) 评论(0) 推荐(0) 编辑
Win32 遍历导出表
摘要： 1 .386 2 .model flat,stdcall 3 option casemap:none 4 5 include Windows.inc 6 include User32.inc 7 include Kernel32.inc 8 includelib User32.lib 9 includelib Kernel32.lib 10 11 .data 12 hBase dd ? 13 lpszFilePath db 'D:\asm\SpiShow.dll',0 14 Msg db '%08x %08x %s',0 15 .c... 阅读全文
posted @ 2012-03-16 16:36 nXqaL 阅读(341) 评论(0) 推荐(0) 编辑
Win32 遍历重定位数据
摘要： 1 .386 2 .model flat,stdcall 3 option casemap:none 4 5 include Windows.inc 6 include User32.inc 7 include Kernel32.inc 8 includelib User32.lib 9 includelib Kernel32.lib 10 11 .data 12 hBase dd ? 13 szDllBuf db 'd:\asm\SpiShow.dll',0 14 .code 15 _RVAToOffset proc _lpFileHead,_dwRVA 16... 阅读全文
posted @ 2012-03-16 16:35 nXqaL 阅读(265) 评论(0) 推荐(0) 编辑
Win32 远程线程
摘要： 1 .386 2 .model flat,stdcall 3 option casemap:none 4 5 include Windows.inc 6 include User32.inc 7 include Kernel32.inc 8 includelib User32.lib 9 includelib Kernel32.lib 10 11 ;声明函数 12 _QLGetProcAddress typedef proto :dword,:dword 13 ;声明函数引用 14 _ApiGetProcAddress typedef ptr _Q... 阅读全文
posted @ 2012-03-16 16:29 nXqaL 阅读(300) 评论(0) 推荐(0) 编辑