[求助]关于遍历模块链表的问题-付费问答-看雪-安全社区|安全招聘|kanxue.com

[旧帖] [求助]关于遍历模块链表的问题 0.00雪花

发表于: 2009-4-25 01:01 2822

[旧帖] [求助]关于遍历模块链表的问题 0.00雪花

exetxt

2009-4-25 01:01

2822

void HideDll(IN DWORD SEPROCESS)
{
    DWORD ipPEB;
    PLIST_ENTRY Head,Cur;
    PPEB_LDR_DATA ldr;
    PLDR_MODULE ldm;
    PPEB pPEB;
    ipPEB=*((DWORD*)(SEPROCESS + 0x1B0)); 
    pPEB=(PPEB)ipPEB; //获取到进程PEB指针地址。
    Head = &(pPEB->Ldr->InLoadOrderModuleList);
    Cur = Head->Flink;
     do
    {
        ldm = CONTAINING_RECORD( Cur, LDR_MODULE, InLoadOrderModuleList);
        DbgPrint("基地址 [0x%X] 名称[%S]\n",ldm->BaseAddress,ldm->BaseDllName.Buffer);
               Cur= Cur->Flink; 
     }while(Head != Cur);   
}