讬拽住驻旨注专诪注谞讗址诇 诪注诇讚讜谞讙 驻讜谉 讗址谉 讗指驻挚谉 讬诪驻旨诇讗址诪注谞讟讬讬砖讗址谉 驻讜谉 讚讬 Win32 API - . 讝讬谞讟 讚讬 诪注诇讚讜谞讙 驻讜谉 讚讬 讜讜注专住讬注 34 讝砖讜拽 专讬驻旨讗指专抓 讝注谞注谉 驻讗专诪讗讻讟 讗讜谉 264 注谞讚注专讜谞讙注谉 讝注谞注谉 讙注诪讗讻讟.
讚讬 诪注专住讟 讜讜讬讻讟讬拽 注谞讚注专讜谞讙注谉:
- 袙 ntdll 写芯斜邪胁谢械薪邪 锌芯写写械褉卸泻邪 蟹邪谐褉褍蟹泻懈 胁褋褌褉芯械薪薪褘褏 斜懈斜谢懈芯褌械泻 ( 锌褉芯械泻褌芯屑 Wine, 邪 薪械 褉芯写薪褘褏 DLL 懈蟹 Windows) 胁 褎芯褉屑邪褌械 (Portable Executable), 胁 褌芯屑 褔懈褋谢械 薪邪 Unix-锌芯写芯斜薪褘褏 锌谢邪褌褎芯褉屑邪褏. 袙 setupapi 写芯斜邪胁谢械薪邪 锌芯写写械褉卸泻邪 褍褋褌邪薪芯胁泻懈 胁褋褌褉芯械薪薪褘褏 斜懈斜谢懈芯褌械泻 胁 褎芯褉屑械 褎懈泻褌懈胁薪褘褏 DLL-蟹邪谐谢褍褕械泻. 袙 winetest 懈 winedump 写芯斜邪胁谢械薪褘 锌褉芯胁械褉泻懈 褋懈谐薪邪褌褍褉 胁褋褌褉芯械薪薪褘褏 DLL 胁 褎芯褉屑邪褌械 PE. 袙褋械 屑芯写褍谢懈, 懈褋锌芯谢褜蟹褍褞褖懈械 msvcrt, 锌械褉械褋芯斜褉邪薪褘 泻邪泻 胁褋褌褉芯械薪薪褘械 斜懈斜谢懈芯褌械泻懈 胁 褎芯褉屑邪褌械 PE;
- 袛芯 胁械褉褋懈懈 4.8.3 芯斜薪芯胁谢械薪褘 泻芯屑锌芯薪械薪褌褘 写胁懈卸泻邪 Mono;
- 袪械邪谢懈蟹芯胁邪薪褘 写芯锌芯谢薪懈褌械谢褜薪褘械 褎褍薪泻褑懈懈 胁 写胁懈卸泻械 (DLL dbgeng): GetNumberModules(), GetModuleByIndex(), GetModuleParameters(), GetModuleByOffset(), ReadVirtual(), IsPointer64Bit(), GetExecutingProcessorType(), GetModuleNameString(), GetModuleVersionInformation();
- 袛芯斜邪胁谢械薪邪 锌芯写写械褉卸泻邪 褋褋褘谢芯泻 芦禄 胁 写懈邪谢芯谐芯胁褘褏 芯泻薪邪褏, 懈褋锌芯谢褜蟹褍械屑褘褏 写谢褟 锌械褉械褏芯写邪 薪邪 褋谢械写褍褞褖褍褞 褋褌邪写懈褞;
- 袟邪泻褉褘褌褘 芯褌褔褢褌褘 芯斜 芯褕懈斜泻邪褏, 褋胁褟蟹邪薪薪褘械 褋 褉邪斜芯褌芯泄 懈谐褉 懈 锌褉懈谢芯卸械薪懈泄: Worms 2, Microsoft Visual Studio 2005, 2008, 2010 Express, Rekordbox 5.3.0, SpellForce 3, Oracle Data Visualization Desktop, Microsoft Office 365, Symantec Eraser, Halo Online Voice Chat, Discord, Miro Realtimeboard, SIMATIC WinCC V15.1, Sniper Elite V2, Sniper Elite 3, Assetto Corsa, Star Wars The Old Republic, Vocaloid 5.
诪拽讜专: opennet.ru