挂钩Windows API

作者: 来源:网络文章时间:2005-12-13 17:14:12

挂钩Windows API(11)
    push    offset old_protect
    lea    eax,[esi+014h]
    push    [eax]
    lea    eax,[esi+00Ch]
    push    [eax]
    push    [esi]
    call    VirtualProtect        ;恢复页保护属性

free_mem:
    push    MEM_RELEASE
    push    0
    push    esi
    call    VirtualFree        ;释放内存
do_sleep:
    push    5000
    call    Sleep
    push    0
    call    ExitProcess
new_sleep:
    ret    004h
end start

第二次调用Sleep的结果是这样:

    004010A4: 6888130000    push 000001388h
    004010A9: E80A000000    call Sleep

    Sleep:     ;这里是跳转到IAT里的地址
    004010B8: FF2514204000    jmp dword ptr [000402014h]

    tabulka:
    00402014: 79 67 E8 77 6C 7D E8 77

    Kernel32.Sleep:
    77E86779: E937A95788    jmp 0004010B5h

    new_sleep:
    004010B5: C20400    ret 004h

1.挂钩Windows API(1)
2.挂钩Windows API(2)
3.挂钩Windows API(3)
4.挂钩Windows API(4)
5.挂钩Windows API(5)
6.挂钩Windows API(6)
7.挂钩Windows API(7)
8.挂钩Windows API(8)
9.挂钩Windows API(9)
10.挂钩Windows API(10)
11.挂钩Windows API(11)
12.挂钩Windows API(12)
13.挂钩Windows API(13)
14.挂钩Windows API(14)
15.挂钩Windows API(15)
16.挂钩Windows API(16)
17.挂钩Windows API(17)
18.挂钩Windows API(18)
19.挂钩Windows API(19)
20.挂钩Windows API(20)
21.挂钩Windows API(21)
22.挂钩Windows API(22)
23.挂钩Windows API(23)
24.挂钩Windows API(24)
25.挂钩Windows API(25)
26.挂钩Windows API(26)
27.挂钩Windows API(27)
28.挂钩Windows API(28)
29.挂钩Windows API(29)
30.挂钩Windows API(30)
31.挂钩Windows API(31)
32.挂钩Windows API(32)
33.挂钩Windows API(33)
34.挂钩Windows API(34)
35.挂钩Windows API(35)
36.挂钩Windows API(36)
37.挂钩Windows API(37)
38.挂钩Windows API(38)
39.挂钩Windows API(39)
40.挂钩Windows API(40)
41.挂钩Windows API(41)
42.挂钩Windows API(42)
43.挂钩Windows API(43)
44.挂钩Windows API(44)
45.挂钩Windows API(45)
46.挂钩Windows API(46)
47.挂钩Windows API(47)
48.挂钩Windows API(48)
49.挂钩Windows API(49)
50.挂钩Windows API(50)
51.挂钩Windows API(51)
52.挂钩Windows API(52)
53.挂钩Windows API(53)
54.挂钩Windows API(54)
55.挂钩Windows API(55)
56.挂钩Windows API(56)
57.挂钩Windows API(57)

共57页 9 7 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32] [33] [34] [35] [36] [37] [38] [39] [40] [41] [42] [43] [44] [45] [46] [47] [48] [49] [50] [51] [52] [53] [54] [55] [56] [57] 8 :>

挂钩Windows API 相关文章：

挂钩Windows API 相关软件：

特别声明：本站除部分特别声明禁止转载的专稿外的其他文章可以自由转载，但请务必注明出处和原始作者。文章版权归文章原始作者所有。对于被本站转载文章的个人和网站，我们表示深深的谢意。如果本站转载的文章有版权问题请联系编辑人员，我们尽快予以更正。
转载请注明来源：http://www.xgdown.com