-
-
[求助]请问各位大虾一个问题?
-
2006-8-26 00:37
3534
-
我想动态修改EXE文件中这个位置006031b9 MOV EAX,[ECX+4A0]的代码,把他NOP掉,用DELPHI应该怎么做?
我这样做,错在哪里?请指点一下。谢谢!
procedure TForm1.check2Click(Sender: TObject);
var
newdata: array[0..$400] of byte;
paddr,paddr1,paddr2: DWORD;
begin
if check2.Checked = true then
begin
paddr:=$006031b9;
paddr1:=$006031ba;
paddr2:=$006031bb;
writeprocessmemory(processhandle,Pointer(paddr), @newdata[nop], 1, bytesread);
writeprocessmemory(processhandle,Pointer(paddr1), @newdata[nop], 1, bytesread);
writeprocessmemory(processhandle,Pointer(paddr2), @newdata[nop], 1, bytesread);
end;
[培训]内核驱动高级班,冲击BAT一流互联网大厂工
作,每周日13:00-18:00直播授课