-
-
[求助]关于DELPHI的一段代码很纳闷!
-
发表于:
2009-1-22 15:17
5208
-
unit NewKernelHandler;
interface
uses windows,sysutils,tlhelp32;
const dbkdll='baby.dll';
type TReadProcessMemory=function(hProcess: THandle; const lpBaseAddress: Pointer; lpBuffer: Pointer; nSize: DWORD; var lpNumberOfBytesRead: DWORD): BOOL; stdcall;
type TWriteProcessMemory=function(hProcess: THandle; const lpBaseAddress: Pointer; lpBuffer: Pointer; nSize: DWORD; var lpNumberOfBytesWritten: DWORD): BOOL; stdcall;
type TOpenProcess=function(dwDesiredAccess: DWORD; bInheritHandle: BOOL; dwProcessId: DWORD): THandle; stdcall;
//这里定义 是kernel32.dll中的API 么? 还是自定义?
procedure LoadDBK32;
var
KernelOpenProcess :TOpenProcess; //
KernelReadProcessMemory :TReadProcessMemory;//
KernelWriteProcessMemory:TWriteProcessMemory;//这里 上面定义了 为什么出现这个是什么意思
var
DarkByteKernel: Thandle;
implementation
procedure LoadDBK32;
begin
if DarkByteKernel=0 then
begin
DarkByteKernel:= LoadLibrary(dbkdll);
if DarkByteKernel=0 then exit;
KernelOpenProcess:=GetProcAddress(darkbytekernel,'OP');
KernelReadProcessMemory:=GetProcAddresS(darkbytekernel,'RPM');
KernelWriteProcessMemory:=GetProcAddress(darkbytekernel,'WPM');
//为什么这里得到这个
end;
end;
end.
希望能得到大家的帮助!
详细的讲下这个源码什么意思饿 ...
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课