-
-
[原创]Point-H万能断点定位器
-
发表于: 2006-12-21 15:18
-
Point-H万能断点定位器
golds7n语:
闲暇时间也写了个,应该是比较通用并快速的,本进程内存内直接搜索定位.
写出来就贴个,以后说不定能用到。
----------------------
附件已更新,感谢朋友们的测试,已更新,支持所有NT平台(Win2000/XP/2003 etc.)
VB源码:
golds7n语:
闲暇时间也写了个,应该是比较通用并快速的,本进程内存内直接搜索定位.
写出来就贴个,以后说不定能用到。
----------------------
附件已更新,感谢朋友们的测试,已更新,支持所有NT平台(Win2000/XP/2003 etc.)
VB源码:
Option Base 0
'code: golds7n
Private Declare Sub CopyMemory Lib "kernel32.dll" Alias "RtlMoveMemory" (ByVal Destination As Any, ByVal Source As Any, ByVal Length As Long)
Private Declare Function GetModuleHandle Lib "kernel32.dll" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Long
Private Declare Function CloseHandle Lib "kernel32.dll" (ByVal hObject As Long) As Long
Private Declare Function SetWindowPos Lib "user32.dll" (ByVal hwnd As Long, ByVal hWndInsertAfter As Long, ByVal x As Long, ByVal y As Long, ByVal cx As Long, ByVal cy As Long, ByVal wFlags As Long) As Long
Function GetPointH() As Long
Dim lHandle As Long
Dim i As Long
Dim k As Long
Dim a() As Byte
Dim fLong As Long
Dim keyLen As Long
Dim key() As Byte
Const fkey = "F3A58BC883E103F3A4E8" 'point-h sign
keyLen = Len(fkey) / 2
ReDim key(1 To keyLen)
For k = 1 To keyLen
key(k) = CByte("&H" & Mid(fkey, k * 2 - 1, 2))
Next
lHandle = GetModuleHandle("user32.dll")
ReDim a(&H60000)
CopyMemory VarPtr(a(0)), lHandle, UBound(a) + 1
fLong = 0
i = LBound(a)
Do While i < UBound(a)
For k = 1 To keyLen
If a(i + k - 1) <> key(k) Then
Exit For
End If
Next
If k > keyLen Then
fLong = i
Exit Do
End If
i = i + 1
Loop
CloseHandle lHandle
Erase a
GetPointH = fLong + lHandle
End Function
Private Sub cmdfind_Click()
TxtAddr = Hex(GetPointH())
End Sub
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
sustian gold7n
|
|
|
|
|
|
呵呵 插件早就带有了
|
|
|
真的不错！
|
|
|
|
|
|
最初由 wynney 发布 请问是哪个插件带的? |
|
|
|
|
|
|
|
|
最初由 Lancia 发布 睁着眼睛瞎喊 http://bbs.pediy.com/showthread.php?s=&threadid=36520 这里不是教程么 
|
|
|
最初由 wynney 发布 呵呵，，，没看仔细！ |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
最初由 快雪时晴 发布 Yeah.so I already delete ApiBreak plugin. And develop this pool tool. 
|
|
|
地址计算有点问题，多加了2
http://bbs.pediy.com/showthread.php?s=&postid=257779#post257779 没问题了，其实都能下断
|
