|
Rr0d:RR0D is a ring 0 debugger by Teddy Rogers
正在邀请人编译.但有困难, |
|
Pumqara's PE Library 0.3c
针对该文件; FORM Reverse-Engineering-Community BY:Extrarius I was trying your library and I found a bug with it I guess. I wrote the following function. #include <windows.h> #include "PeLibrary.h" typedef BOOL (WINAPI* LPFNPLOPENFILE)(DWORD,LPTSTR); typedef DWORD (WINAPI* LPFNPLADDIMPORTS)(LPTSTR,LPTSTR); typedef BOOL (WINAPI* LPFNPLCLOSEFILE)(); //------------------------------------------------------------------------------------- bool AddImport( const char* FilePath, const char* LibraryName, const char* FuncName ) { if ( FilePath == NULL || LibraryName == NULL || FuncName == NULL ) { return false; } HMODULE hModule = NULL; bool RetVal = false; try { hModule = LoadLibrary( "PeLibrary.dll" ); if ( hModule != NULL ) { LPFNPLOPENFILE pOpenFile = (LPFNPLOPENFILE)GetProcAddress( hModule, "plOpenFile" ); LPFNPLCLOSEFILE pCloseFile = (LPFNPLCLOSEFILE)GetProcAddress( hModule, "plCloseFile" ); LPFNPLADDIMPORTS pAddImp = (LPFNPLADDIMPORTS)GetProcAddress( hModule, "plAddImportFunction" ); if ( pOpenFile != NULL && pCloseFile != NULL && pAddImp != NULL ) { if ( pOpenFile( PL_NO_OPEN_DIALOG, (char*)FilePath ) ) { if ( pAddImp( (char*)LibraryName, (char*)FuncName ) ) { RetVal = true; } } pCloseFile(); } } } catch( ... ) { } if ( hModule != NULL ) { FreeLibrary( hModule ); } return RetVal; } Everything works fine until the line if ( pAddImp( (char*)LibraryName, (char*)FuncName ) ) gets executed. The functions creates a section named +Pumqara but it corrupts the file and gives an access violation error. I tested the function with a simple console program made with VC++ 6 |
|
Rr0d:RR0D is a ring 0 debugger by Teddy Rogers
下载后是的,我在试用. |
|
最暴强的加壳工具?
THIS POST IS LOCK! |
|
Rr0d:RR0D is a ring 0 debugger by Teddy Rogers
ring 0 is good! |
|
|
|
advancedolly1.26b3+b5+b6+b10
Olly Advanced 1.26 Beta 6: - fixed a little bug - added now option to choose between two Anti-RDTSC variants - added one more tab |
|
advancedolly1.26b3+b5+b6+b10
最初由 liuyilin 发布 YOU SEE: http://tutorials.accessroot.com/ |
|
advancedolly1.26b3+b5+b6+b10
太客气了,昨天有人需要ImportREC v1.42的,我告知有很多只要到作者的主页就有.结果比用google还有用 |
|
|
|
eBOOKS (POST ALL HERE) 电子图书
Ebooks Club Computers And IT Computers And IT [5615] Literature And Fiction Literature And Fiction [4689] Science And Engineering Science And Engineering [3322] History And Military History History And Military History [1477] Medical And Health Medical And Health [1037] Business And Commerce Business And Commerce [1292] Graphics And Photography Graphics And Photography [369] Travel And Adventure Travel And Adventure [135] Other Other [1845] http://www.ebooksclub.org/ |
|
|
|
advancedolly1.26b3+b5+b6+b10
THANKS@! |
|
hardlock.sys new version ?
最初由 thomokon 发布 share it: |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值