PByte - 腾讯云开发者社区

pByte = (PBYTE)malloc(pSection->SizeOfRawData); SetFilePointer(hFile, pSection->PointerToRawData,...0, FILE_BEGIN); memset(pByte, 0, pSection->SizeOfRawData); ReadFile(hFile, pByte, pSection->SizeOfRawData...pByte = (PBYTE)malloc(pSection->SizeOfRawData); SetFilePointer(hFile, pSection->PointerToRawData,...pByte = (PBYTE)malloc(pSection->SizeOfRawData); SetFilePointer(hFile, pSection->PointerToRawData,...pByte = (PBYTE)malloc(pSection->SizeOfRawData); SetFilePointer(hFile, pSection->PointerToRawData,

3872 0

dnyArray分析，动态数组分析

0 then Error(reRangeError); _DynArrayClear(a, typeInfo); exit; oldLength := 0; if p nil then Dec(PByte...(p), SizeOf(TDynArrayRec)); oldLength := PDynArrayRec(p).Length; Inc(PByte(typeInfo), PDynArrayTypeInfo...(p).RefCnt = 1) then pp := p; if (newLength nil) then FinalizeArray(PByte...oldLength; if minLength > newLength then minLength := newLength; if ElTypeInfo nil then FillChar((PByte..., minLength) Move(PByte(a)^, (PByte(p) + SizeOf(TDynArrayRec))^, minLength*elSize); _DynArrayClear(a,

4012 0

您找到你想要的搜索结果了吗？

是的

没有找到

2.13 PE结构：实现PE代码段加密

"[-] 已对 %s 节 --> XOR加密/解密 --> XOR密钥: %d \n\n", pSection->Name, Key); // 分配内存空间 DWORD dwRead = 0; PBYTE...pByte = (PBYTE)malloc(pSection->SizeOfRawData); SetFilePointer(hFile, pSection->PointerToRawData, 0..., FILE_BEGIN); memset(pByte, 0, pSection->SizeOfRawData); ReadFile(hFile, pByte, pSection->SizeOfRawData..., &dwRead, NULL); // 对代码节加密 for (int x = 0; x SizeOfRawData; x++) { pByte[x] ^= Key...} // 写出加密后的数据 SetFilePointer(hFile, pSection->PointerToRawData, 0, FILE_BEGIN); WriteFile(hFile, pByte

3673 0

Hells Gate的一次尝试入门

)pLoadModule->InMemoryOrderLinks.Flink-0x10); } while ((PLDR_DATA_TABLE_ENTRY)((PBYTE)pLoadModule->...)Peb->Ldr->InMemoryOrderModuleList.Flink - 0x10); //pFirstLoadModule = (PLDR_DATA_TABLE_ENTRY)((PBYTE...)Peb->Ldr->InMemoryOrderModuleList.Flink - 0x10); //pFirstLoadModule = (PLDR_DATA_TABLE_ENTRY)((PBYTE...*((PBYTE)pWzAddressOfFunction + wz + 0x02) == 0xd1 && *((PBYTE)pWzAddressOfFunction + wz + 0x03)...== 0xb8 && *((PBYTE)pWzAddressOfFunction + wz + 0x06) == 0x00 && *((PBYTE)pWzAddressOfFunction

1.2K2 0

API钩取

); pByte = (PBYTE)pfnOrg; // 若已被勾取，则返回False if( pByte[0] == 0xE9 ) return FALSE...pOrgBytes) { FARPROC pFunc; DWORD dwOldProtect; PBYTE pByte; // 获取 API 地址 pFunc...False if( pByte[0] !...pByte; pFunc = (FARPROC)GetProcAddress(GetModuleHandleA(szDllName), szFuncName); pByte = (PBYTE...(GetModuleHandleA(szDllName), szFuncName); pByte = (PBYTE)pFunc; if( pByte[0] !

8892 0

4.4 EAT Hook 挂钩技术

OptionalHeader); // 得到导出表的虚拟地址 PIMAGE_EXPORT_DIRECTORY pExpDes = (PIMAGE_EXPORT_DIRECTORY) ((PBYTE...IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress); // 获取导出表的函数地址，函数名称，函数序号 PULONG pAddressOfFunctions = (PULONG)((PBYTE...)DllBase + pExpDes->AddressOfFunctions); PULONG pAddressOfNames = (PULONG)((PBYTE)DllBase + pExpDes...->AddressOfNames); PUSHORT pAddressOfNameOrdinals = (PUSHORT)((PBYTE)DllBase + pExpDes->AddressOfNameOrdinals...; ++i) { index = pAddressOfNameOrdinals[i]; // 得到导出函数名 LPCTSTR pFuncName = (LPTSTR)((PBYTE

1691 0

2.13 PE结构：实现PE代码段加密

已对 %s 节 --> XOR加密/解密 --> XOR密钥: %d \n\n", pSection->Name, Key); // 分配内存空间 DWORD dwRead = 0; PBYTE...pByte = (PBYTE)malloc(pSection->SizeOfRawData); SetFilePointer(hFile, pSection->PointerToRawData,...0, FILE_BEGIN); memset(pByte, 0, pSection->SizeOfRawData); ReadFile(hFile, pByte, pSection->SizeOfRawData..., &dwRead, NULL); // 对代码节加密 for (int x = 0; x SizeOfRawData; x++) { pByte[x] ^..., pSection->SizeOfRawData, 0, FILE_BEGIN); pSection->Characteristics = 0xE0000020; free(pByte);

2342 0

Windows核心编程：第13章内存体系结构

LPWSTR lpCmdLine, _In_ int nCmdShow) { WORD w; PVOID test = &w; char c = *(PBYTE...)test; //访问错位数据 test = (PBYTE)&w + 1; DWORD d = *(UNALIGNED PDWORD)test;//UNALIGNED在x86平台无效

4584 0

4.4 EAT Hook 挂钩技术

->OptionalHeader); // 得到导出表的虚拟地址 PIMAGE_EXPORT_DIRECTORY pExpDes = (PIMAGE_EXPORT_DIRECTORY) ((PBYTE...IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress); // 获取导出表的函数地址，函数名称，函数序号 PULONG pAddressOfFunctions = (PULONG)((PBYTE...)DllBase + pExpDes->AddressOfFunctions); PULONG pAddressOfNames = (PULONG)((PBYTE)DllBase + pExpDes-...>AddressOfNames); PUSHORT pAddressOfNameOrdinals = (PUSHORT)((PBYTE)DllBase + pExpDes->AddressOfNameOrdinals...NumberOfNames; ++i) { index = pAddressOfNameOrdinals[i]; // 得到导出函数名 LPCTSTR pFuncName = (LPTSTR)((PBYTE

2921 0

非阻塞recvfrom的设置

; 发送的 UNICODE 串转换成单字节串 UINT nLen = len * 2; char *pByte...= new char[nLen+1]; memset(pByte, 0, nLen+1); WideCharToMultiByte...(CP_ACP, NULL, buf, wcslen(buf),pByte, nLen, NULL, NULL); int nRet;...else { // 接收数据 nRet = recv(m_sSocket, pByte..., nLen, buf, len); delete [] pByte; pByte = NULL;

1.9K2 0

无注册表的COM调用

references to callee's functions while (pImportDesc->Name) { LPCSTR lpszName = ((LPCSTR)((PBYTE...(pImportDesc->Name == 0) return FALSE; PIMAGE_THUNK_DATA pThunk = (PIMAGE_THUNK_DATA)( (PBYTE...bFound && (*ppfn > sm_pvMaxAppAddr)) { PBYTE pbInFunc = (PBYTE) *ppfn; // Is this a wrapper

1021 0

Antimalware Scan Interface Provider for Persistence

SUCCEEDED(stream->GetAttribute(AMSI_ATTRIBUTE_CONTENT_SIZE, sizeof(ULONGLONG), reinterpret_castPBYTE...actualSize)) && actualSize == sizeof(ULONGLONG)) { *result = AMSI_RESULT_NOT_DETECTED; return S_OK; } PBYTE...SUCCEEDED(stream->GetAttribute(AMSI_ATTRIBUTE_CONTENT_ADDRESS, sizeof(PBYTE), reinterpret_castPBYTE>...(&contentAddress), &actualSize)) && actualSize == sizeof(PBYTE)) { *result = AMSI_RESULT_NOT_DETECTED

8421 0

几个 Syscall 项目的学习记录

是通过匹配以下汇编指令定位系统调用号的： MOV R10, RCX MOV EAX, 通过反汇编，可以发现，该汇编指令对应的机器码如下： HellsGate 正是通过查找这些机器码定位到系统调用号的： if (*((PBYTE...)pFunctionAddress + cw) == 0x4c && *((PBYTE)pFunctionAddress + 1 + cw) == 0x8b && *((PBYTE)pFunctionAddress...+ 2 + cw) == 0xd1 && *((PBYTE)pFunctionAddress + 3 + cw) == 0xb8 && *((PBYTE)pFunctionAddress + 6...+ cw) == 0x00 && *((PBYTE)pFunctionAddress + 7 + cw) == 0x00) { BYTE high = *((PBYTE)pFunctionAddress...+ 5 + cw); BYTE low = *((PBYTE)pFunctionAddress + 4 + cw); pVxTableEntry->wSystemCall = (high << 8

7041 0

FFmpeg 开发(04)：FFmpeg + OpenGLES 实现音频可视化播放

//小端序存储的音频数据 uint8_t* pByte = audioFrame->data; for(int i=0; idataSize; i++) { short *pShort...= pByte + i * 4; //左声道值 short leftChannelValue = *pShort; pShort = pByte + i * 4 + 2; //右声道值...//大端序存储的音频数据 uint8_t* pByte = audioFrame->data; for(int i=0; idataSize; i++) { short *pShort...= pByte + i * 4; //左声道值 short leftChannelValue = ((*pShort & 0xFF00) >> 8) | ((*pShort & 0x00FF...) << 8); pShort = pByte + i * 4 + 2; //右声道值 short rightChannelValue = ((*pShort & 0xFF00) >> 8

1.1K3 0

一.什么是逆向分析、逆向分析应用及经典扫雷游戏逆向

pByte = NULL; pByte = (PBYTE)malloc(dwSize); // 读取整个雷区的数据 ReadProcessMemory(hProcess, (...LPVOID)dwBoomAddr, pByte, dwSize, 0); int i = 0; int j = 0; int n = dwSize; // 读取雷区的长和宽...pTmpByte = NULL; pTmpByte = (PBYTE)malloc(dwHeight * dwWidth); while (i < dwSize) { //...边界判断 if (pByte[i] == 0x10 && pByte[i + 1] == 0x10) { i = i + dwWidth + 2; continue...; } else if (pByte[i] == 0x10) { for (j = 1; j <= dwWidth; j++) { pTmpByte

1.5K2 0

7z 自解压读取 config.txt 配置的代码实现

) == 0) return true; // 将不是末尾标记的数据追加给传出参数 BYTE pByte...szBuffer[nPos]; // 程序中常量字符串末尾是 0，但文件中不是 0，如果读到 0 证明是程序中的常量，而不是文件中的 if (pByte...bFoundBegin = false; break; } strOutput += pByte

2.3K3 0

26种对付反调试的方法

pPeb = (PVOID)__readfsdword(0x0C * sizeof(PVOID)); pPeb = (PVOID)((PBYTE...pImageBase = (PBYTE)GetModuleHandle(NULL); PIMAGE_NT_HEADERS pImageNtHeaders = GetImageNtHeaders...pMappedImageBase = NULL; __try { PBYTE pImageBase = (PBYTE)GetModuleHandle(NULL);...<< std::endl; exit(-1); } if (pPeb64) { heap = (PVOID)*(PDWORD_PTR)((PBYTE...= (PDWORD)((PBYTE)heap + GetHeapForceFlagsOffset(true)); if (*heapFlagsPtr & ~HEAP_GROWABLE

5.8K3 2

FFmpeg 开发(04)：FFmpeg + OpenGLES 实现音频可视化播放

//小端序存储的音频数据 uint8_t* pByte = audioFrame->data; for(int i=0; idataSize; i++) { short...*pShort = pByte + i * 4; //左声道值 short leftChannelValue = *pShort; pShort = pByte + i *...//大端序存储的音频数据 uint8_t* pByte = audioFrame->data; for(int i=0; idataSize; i++) { short...*pShort = pByte + i * 4; //左声道值 short leftChannelValue = ((*pShort & 0xFF00) >> 8) | ((*pShort...& 0x00FF) << 8); pShort = pByte + i * 4 + 2; //右声道值 short rightChannelValue = ((*pShort

9393 0

PE格式：分析IatHook并实现

我们先来看一下微软对该结构的定义：typedef struct _IMAGE_THUNK_DATA32 { union { DWORD ForwarderString; // PBYTE...pDosHeader = (PIMAGE_DOS_HEADER)DllBase;// PIMAGE_OPTIONAL_HEADER pOptHeader = (PIMAGE_OPTIONAL_HEADER)((PBYTE...pNtHeader->OptionalHeader);// 2.得到导出表的虚拟地址PIMAGE_EXPORT_DIRECTORY pExpDes = (PIMAGE_EXPORT_DIRECTORY)((PBYTE...);PUSHORT pAddressOfNameOrdinals = (PUSHORT)((PBYTE)DllBase + pExpDes->AddressOfNameOrdinals);// 4.循环查找...0; i NumberOfNames; ++i){index = pAddressOfNameOrdinals[i];LPCTSTR pFuncName = (LPTSTR)((PBYTE

4040 0

数字图像放大算法

(int row = 0 ; row < lNewHeight ; row ++) { pNewRow[row] = PRGBTRIPLE( (PBYTE...int row = 0 ; row < lOldHeight ; row ++) { pOldRow[row] = PRGBTRIPLE ( (PBYTE...(int row = 0 ; row < lNewHeight ; row ++) { pNewRow[row] = PRGBTRIPLE( (PBYTE...int row = 0 ; row < lOldHeight ; row ++) { pOldRow[row] = PRGBTRIPLE ( (PBYTE

1.7K3 0

点击加载更多

扫码

添加站长进交流群

领取专属 10元无门槛券

手把手带您无忧上云

CC++ 对代码节的动态加解密

dnyArray分析，动态数组分析

2.13 PE结构：实现PE代码段加密

Hells Gate的一次尝试入门

API钩取

4.4 EAT Hook 挂钩技术

2.13 PE结构：实现PE代码段加密

Windows核心编程：第13章内存体系结构

4.4 EAT Hook 挂钩技术

非阻塞recvfrom的设置

无注册表的COM调用

Antimalware Scan Interface Provider for Persistence

几个 Syscall 项目的学习记录

FFmpeg 开发(04)：FFmpeg + OpenGLES 实现音频可视化播放

一.什么是逆向分析、逆向分析应用及经典扫雷游戏逆向

7z 自解压读取 config.txt 配置的代码实现

26种对付反调试的方法

FFmpeg 开发(04)：FFmpeg + OpenGLES 实现音频可视化播放

PE格式：分析IatHook并实现

数字图像放大算法

扫码

相关资讯

热门标签

活动推荐

运营活动

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐