-
直接在内存运行PE
使用了PE加载技术、Hook技术用程序加载PE文件到内存并运行。当在内存中运行的程序,比如arp.EXE执行完之后就会退出,那结果是ExitProcess被调用,那将是我们主进程也结束,显然我们不希望这样。
处理办法:HOOK ExitProcess。问题来了,对MS的许多控制台程序,它们退出都是调用exit,所以如果HOOK ExitProcess, 那我们俩次在内存中运行arp.EXE之后就会死锁。所以对这类程序而言,不能H
OOK ExitProcess,只能HOOK msvcrt!exit。LOADER要加载一个EXE文件,这个EXE文件加载的地址是在0x400000。在我们LOADER的MAIN函数里面,这个地址已经被占用,而你是不能去Free这个地址
重新分布的,这样可能会导致程序崩溃,处理方法相见说明。
- 2022-01-21 18:51:40下载
- 积分:1
-
使用PHP和AJAX,MySQL的评论
Comments using PHP and ajax and mySQl
- 2022-02-02 02:59:00下载
- 积分:1
-
The C++ Cookbook will make your path to mastery much shorter. This practical, pr...
The C++ Cookbook will make your path to mastery much shorter. This practical, problem-solving guide is ideal if you re an engineer, programmer, or researcher writing an application for one of the legions of platforms on which C++ runs. The algorithms provided in C++ Cookbook will jump-start your development by giving you some basic building blocks that you don t have to develop on your own.
- 2022-01-31 09:06:54下载
- 积分:1
-
大家看看,定有收获哦
我愿 将之与大家分享
大家看看,定有收获哦
我愿 将之与大家分享-you see, there is harvest Oh, I like to share it with you
- 2022-07-13 17:25:34下载
- 积分:1
-
Atmel sensor程序设计白皮书,编程内部SDK开发说明,最新版本,适用于嵌入式系统指纹识别开发...
Atmel sensor程序设计白皮书,编程内部SDK开发说明,最新版本,适用于嵌入式系统指纹识别开发-White Paper program design, development SDK programming internal note, the latest version, Embedded system applicable to the development of fingerprint recognition
- 2022-02-01 07:58:09下载
- 积分:1
-
excel对表软件
采用VBA实现对表。程序中采用了类似VB的界面,只要打开两张EXCEL表格,直接可以实现两张表的对比,更新操作。
- 2023-02-25 04:10:03下载
- 积分:1
-
房屋中介软件,delphi开发,不错,用用就知道了
房屋中介软件,delphi开发,不错,用用就知道了-housing intermediary software, delphi development, yes, the user will know
- 2022-05-14 06:30:54下载
- 积分:1
-
A strong service program from time to time, because often when we try to regular...
一个强大的服务程序时不时的出现,因为经常的时候我们会尝试定期做同样的事情,但有时会忘记,所以这个服务程序都是有编写的,有点像一个常规的Sql一样的作业,可以先设置执行多长时间。
- 2022-01-25 17:01:47下载
- 积分:1
-
在控制系统中,由于某些系统不能直接实现所期望的性能,因此需要用系统校正的方法使其具有所期望的性能。本程序是基于频域法的串联校正,分为超前校正和滞后校正。...
在控制系统中,由于某些系统不能直接实现所期望的性能,因此需要用系统校正的方法使其具有所期望的性能。本程序是基于频域法的串联校正,分为超前校正和滞后校正。-In the control system, because some systems can not directly achieve the desired performance, requiring a systematic method of correction to have the desired performance. This procedure is based on the frequency-domain method of series correction, divided into ahead of correction and lag correction.
- 2022-03-05 12:04:50下载
- 积分:1
-
Given more than ten kinds of relevant OFDM channel estimation methods MATLAB cla...
给出了十余种有关OFDM信道估计方法的MATLAB经典程序-Given more than ten kinds of relevant OFDM channel estimation methods MATLAB classical procedures
- 2023-01-15 12:15:04下载
- 积分:1