-
直接在内存运行PE
使用了PE加载技术、Hook技术用程序加载PE文件到内存并运行。当在内存中运行的程序,比如arp.EXE执行完之后就会退出,那结果是ExitProcess被调用,那将是我们主进程也结束,显然我们不希望这样。
处理办法:HOOK ExitProcess。问题来了,对MS的许多控制台程序,它们退出都是调用exit,所以如果HOOK ExitProcess, 那我们俩次在内存中运行arp.EXE之后就会死锁。所以对这类程序而言,不能H
OOK ExitProcess,只能HOOK msvcrt!exit。LOADER要加载一个EXE文件,这个EXE文件加载的地址是在0x400000。在我们LOADER的MAIN函数里面,这个地址已经被占用,而你是不能去Free这个地址
重新分布的,这样可能会导致程序崩溃,处理方法相见说明。
- 2022-01-21 18:51:40下载
- 积分:1
-
CGA模式下的绘图程序,绘制梯形 可以选择画几个(8086)
CGA模式下的绘图程序,绘制梯形 可以选择画几个(8086)-CGA graphics mode procedures, mapping trapezoidal can choose several paintings (8086)
- 2022-01-30 16:00:45下载
- 积分:1
-
GMM的巨磁电阻效应
gmm gmr
gmm gmr
- 2023-06-01 15:35:03下载
- 积分:1
-
大地电磁测深(MT)一维层状模型电阻率正演。计算不同频率的电阻率,反应电阻率随深度的变化。...
大地电磁测深(MT)一维层状模型电阻率正演。计算不同频率的电阻率,反应电阻率随深度的变化。-Magnetotelluric sounding (MT) one-dimensional layered model of resistivity forward modeling. Calculate the resistivity of different frequencies, the reaction changes in resistivity with depth.
- 2022-04-21 05:28:32下载
- 积分:1
-
一个上海的地图,各种各样的JPG可以作为GIS的原始数据
一个上海地图,jpg各式的,可以用来作为gis处理的原始数据-a Shanghai maps, a variety of jpg can be used as a gis of the original data
- 2022-11-25 20:10:03下载
- 积分:1
-
24 wherein Chinese font can be used to the GUI interface display Chinese charact...
24点阵宋体汉字字库,可用于GUI界面的汉字的显示-24 wherein Chinese font can be used to the GUI interface display Chinese characters
- 2023-08-13 07:35:03下载
- 积分:1
-
在C++代码的十五方博弈
Fifteen Square Game in C++ code
- 2022-06-21 08:06:26下载
- 积分:1
-
support vector clustering results of the program to preserve small little
支持向量聚类的保存结果的源程序很小 不大-support vector clustering results of the program to preserve small little
- 2023-01-02 17:20:22下载
- 积分:1
-
形状代码
您可以使用此库,当你需要它的时候,使多个形状放置它作为一个头文件并调用它的函数,因此它不仅是节省时间,但本身就很容易理解。
- 2022-01-25 19:00:24下载
- 积分:1
-
For any software that handles client requests, at some point, there must be a pe...
For any software that handles client requests, at some point, there must be a persistent point where all data related to the clients are stored. Those storages can be any thing (database, mainframes, files etc.). What if this software needs to access those storages with concurrent requests, knowing that opening a connection is memory and CPU consuming? A Connection Pool is a container of open and reusable connections. It will help you save both memory and CPU time. Also, it will help you in managing connections.
- 2022-03-20 11:42:04下载
- 积分:1