91av视频/亚洲h视频/操亚洲美女/外国一级黄色毛片 - 国产三级三级三级三级

  • 大小: 826KB
    文件類型: .rar
    金幣: 2
    下載: 0 次
    發布日期: 2021-05-21
  • 語言: 其他
  • 標簽: Ntoskrnl.exe??

資源簡介

動態取得Ntoskrnl.exe導出函數地址

資源截圖

代碼片段和文件信息

//?GetDllFunctionAddress.cpp
//
//?Generated?by?DriverWizard?version?DriverStudio?3.1.0?(Build?1722)
//

#include?

#include?“..\SOURCES\type.h“
#include?“..\SOURCES\debug.h“
#include?“..\SOURCES\GetJmpAddress.h“
#include?“..\SOURCES\IoCreateMdlFroAddress.h“
#include?“Type.h“
#include?“GetDllFunctionAddress.h“
__declspec(dllimport)NTSTATUS?NTAPI
??IoFileReadFile(
????IN?HANDLE??FileHandle
????OUT?PIO_STATUS_BLOCK??IoStatusBlock
????OUT?PVOID??Buffer
????IN?ULONG??Length
????IN?PLARGE_INTEGER??ByteOffset??OPTIONAL
IN?KPROCESSOR_MODE??AccessMode
????);
__declspec(dllimport)NTSTATUS??NTAPI
??IoFileCreateFile(
?OUT?PHANDLE?FileHandle
??????????????????IN?ACCESS_MASK??DesiredAccess
??????????????????IN?Pobject_ATTRIBUTES??objectAttributes
??????????????????OUT?PIO_STATUS_BLOCK??IoStatusBlock
??????????????????IN?PLARGE_INTEGER??AllocationSize?OPTIONAL
??????????????????IN?ULONG??FileAttributes
??????????????????IN?ULONG??ShareAccess
??????????????????IN?ULONG??CreateDisposition
??????????????????IN?ULONG??CreateOptions
??????????????????IN?PVOID??EaBuffer?OPTIONAL
??????????????????IN?ULONG??EaLength
??????????????????);
__declspec(dllimport)NTSTATUS??NTAPI
??IoFileWriteFile(
??????????????????IN?HANDLE??FileHandle
??????????????????OUT?PIO_STATUS_BLOCK??IoStatusBlock
??????????????????IN?PVOID??Buffer
??????????????????IN?ULONG??Length
??????????????????IN?PLARGE_INTEGER??ByteOffset??OPTIONAL
??IN?KPROCESSOR_MODE??AccessMode);
__declspec(dllimport)NTSTATUS??NTAPI
??IoFileClose(
??????????????????IN?HANDLE??FileHandle
??IN?KPROCESSOR_MODE??AccessMode);
__declspec(dllimport)NTSTATUS?NTAPI?CheckHandle(OUT?PHANDLE??FileHandle);
__declspec(dllimport)NTSTATUS?NTAPI?CheckobjectAttributes(IN?Pobject_ATTRIBUTES??objectAttributes);
__declspec(dllimport)NTSTATUS?NTAPI?CheckIoStatusBlock(IN?PIO_STATUS_BLOCK??IoStatusBlock);
typedef?struct?{
????DWORD????dwNumberOfModules;
????SYSTEM_MODULE_INFORMATION????smi;
}?MODULES?*PMODULES;
NTSYSAPI
NTSTATUS
NTAPI
NtQuerySystemInformation(
IN?SYSTEM_INFORMATION_CLASS?SystemInformationClass
IN?OUT?PVOID?SystemInformation
IN?ULONG?SystemInformationLength
OUT?PULONG?ReturnLength?OPTIONAL
);
DWORD?pGetDllFunctionAddress(char*?lpFunctionName?
PUNICODE_STRING?pDllName
PVOID?MoudelbaseAddress
ULONG?*FunctionRAV
Pbase_ADDRESS_MESSAGE?OutMoudelbaseAddress)?
{
????HANDLE?hThread?hSection?hFile?hMod;
????SECTION_IMAGE_INFORMATION?sii;
????IMAGE_DOS_HEADER*?dosheader;
????IMAGE_OPTIONAL_HEADER*?opthdr;
????IMAGE_EXPORT_DIRECTORY*?pExportTable;
????DWORD*?arrayOfFunctionAddresses;
????DWORD*?arrayOfFunctionNames;
????WORD*?arrayOfFunctionOrdinals;
????DWORD?functionOrdinal;
????DWORD?base?x?functionAddress;
????char*?functionName;
????STRING?ntFunctionName?ntFunctionNameSearch;
????PVOID?baseAddress?=?NULL;
????SIZE_T?size=0;
????NTSTATUS?Status=0;
IO_STATUS_BLOCK?iosb;

?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----

????.......???????113??2010-04-23?20:08??GetDllFunctionAddressDll\buildchk_wxp_x86.err

????.......??????2884??2010-04-23?20:08??GetDllFunctionAddressDll\buildchk_wxp_x86.log

?????文件???????4744??2010-04-23?20:11??GetDllFunctionAddressDll\buildfre_wxp_x86.log

?????文件?????????81??2010-03-31?20:45??GetDllFunctionAddressDll\function.h

?????文件??????97242??2010-04-23?16:56??GetDllFunctionAddressDll\GetDllFunctionAddress.lib

?????文件??????39404??2010-04-01?16:59??GetDllFunctionAddressDll\GetDllFunctionAddressDll.aps

?????文件???????7377??2010-04-23?20:08??GetDllFunctionAddressDll\GetDllFunctionAddressDll.c

?????文件????????208??2010-04-02?17:24??GetDllFunctionAddressDll\GetDllFunctionAddressDll.def

?????文件??????20914??2010-04-02?22:04??GetDllFunctionAddressDll\GetDllFunctionAddressDll.dsp

?????文件????????343??2010-03-31?20:45??GetDllFunctionAddressDll\GetDllFunctionAddressDll.dsw

?????文件???????1587??2010-04-23?20:11??GetDllFunctionAddressDll\GetDllFunctionAddressDll.h

?????文件??????74752??2010-04-23?20:27??GetDllFunctionAddressDll\GetDllFunctionAddressDll.ncb

?????文件?????282112??2010-04-23?20:27??GetDllFunctionAddressDll\GetDllFunctionAddressDll.opt

?????文件???????2056??2010-03-31?20:45??GetDllFunctionAddressDll\GetDllFunctionAddressDll.rc

?????文件?????????53??2010-04-01?16:33??GetDllFunctionAddressDll\GetFunctionAddressDll.def

?????文件???????9216??2010-04-22?21:45??GetDllFunctionAddressDll\IoFile.dll

?????文件???????5344??2010-04-22?21:45??GetDllFunctionAddressDll\IoFile.lib

?????文件??????????0??2010-04-02?22:04??GetDllFunctionAddressDll\KeInsertQueueApc.c

?????文件??????????0??2010-04-02?22:03??GetDllFunctionAddressDll\KeInsertQueueApc.h

?????文件????????308??2010-03-31?20:45??GetDllFunctionAddressDll\makefile

?????文件???????1215??2010-04-02?01:10??GetDllFunctionAddressDll\NtQuerySystemInformation.c

?????文件???????2786??2010-04-01?21:18??GetDllFunctionAddressDll\NtQuerySystemInformation.h

?????文件???????2000??2010-04-23?20:08??GetDllFunctionAddressDll\objchk_wxp_x86\i386\GetDllFunctionAddressDll.exp

?????文件???????3830??2010-04-23?20:08??GetDllFunctionAddressDll\objchk_wxp_x86\i386\GetDllFunctionAddressDll.lib

?????文件??????43223??2010-04-23?20:08??GetDllFunctionAddressDll\objchk_wxp_x86\i386\getdllfunctionaddressdll.obj

?????文件????????972??2010-04-23?20:08??GetDllFunctionAddressDll\objchk_wxp_x86\i386\getdllfunctionaddressdll.res

?????文件???????8836??2010-04-23?20:08??GetDllFunctionAddressDll\objchk_wxp_x86\i386\ntquerysysteminformation.obj

?????文件???????6752??2010-04-23?20:08??GetDllFunctionAddressDll\objchk_wxp_x86\i386\pslookupthreadbythreadid.obj

????.......??????1006??2010-04-23?20:08??GetDllFunctionAddressDll\objchk_wxp_x86\_objects.mac

?????文件???????2037??2010-04-23?20:11??GetDllFunctionAddressDll\objfre_wxp_x86\i386\GetDllFunctionAddressDll.exp

............此處省略102個文件信息

評論

共有 條評論

相關資源