style="display:inline-block;width:300px;height:250px"
data-ad-client="ca-pub-5935214489160196"
data-ad-slot="8007533899">

Windows NT系統介紹

<Step 3>WinICEidt2E0008:8013CBC0 KiReleaseSpinLock (NTOSKRNL)WinICE2EICENT2E2E () ICE2ENT DDK DriverWinICE()(DriverSource Code) SIDTWINICEWINICE WinICE Int 2d :0008:8013ddfc Int 2e :0008:8013cbc0 Int 31 : 0008:806b8044 Int 33 : 0008:80645dc4 Int 34 : 0008:806b9044 Int 37 : 0008:8013c336 WinICE Int 2d : 0008:8053c462 Int 2e : 0008:8053c471 Int 31 : 0008:8053c480 Int 33 : 0008:8053c48f Int 34 : 0008:8053c49e Int 37 : 0008:8053c4bc () 2E NTDLL.DLL2B2C : NtSetHighWaitLowThread 77F57F7C: CD 2B int 2Bh 77F57F7E: C3 ret NtSetLowWaitHighThread 77F58020: CD 2C int 2Ch 77F58022: C3 ret USER32.DLL IsWindow ……() 77E52244 8B442404 MOV EAX, 77E52248 CD2B INT 2B 2D31NT NTNT2E2ENTKernelUser Mode2EKernelNT API2E2EAPI? […]

Windows 98動態連結函式庫攔截技巧

,repair_send,Send http://www.sparc14.cc.ncku.edu.tw/e9484110(^_^) () Windows 98WSOCK32.DLL , <Step 1>LoadLibraryAws2_32.dll,ws2_32.dll <Step 2>LoadLibraryAmswsock.dllmswsock.dll <Step 3>wsock32.dllgethostbynameGetProcAddressws2_32.dll <Step 4>wsock32.dllEnumProtocolsAGetProcAddressmswsock.dll () 785C132C MOV ,EAX ,LoadLibraryA(ws2_32.dll)785C6180,785C1335,LoadLibraryA(mswsock.dll)785C6184, 785C1810 PUSH 785C63C0 785C1815 PUSH DWORD PTR 785C181B CALL DWORD PTR GetProcAddress 785C63C0gethostbyname,785C6180LoadLibraryA(ws2_32.dll),HelpGetProcAddress, GetProcAddress( HMODULE hModule, // handle to DLL module LPCSTR lpProcName // name of function ); […]