一定是哪里翻到的源码吧 为什么要用特殊支持库呢?(__asm (“push 0 | push [ebp-4] | push [ebp-8] | push 0 | call [ebp-0c]”)) 直接用内联汇编替代啊 _asm命令换成置入代码即可 :
|
汇编取API地址 | 整数型 | | |
库文件名 | 文本型 | | | | 在库中对应命令名 | 文本型 | | | | dll_地址 | 整数型 | | | | 置入代码 ({ 129, 236, 8, 0, 0, 0, 199, 69, 252, 0, 0, 0, 0, 255, 117, 8, 232, 59, 0, 0, 0, 137, 69, 252, 131, 125, 252, 0, 15, 142, 30, 0, 0, 0, 139, 69, 252, 139, 93, 16, 137, 3, 255, 117, 12, 255, 117, 252, 232, 128, 0, 0, 0, 137, 69, 252, 139, 69, 252, 233, 10, 0, 0, 0, 184, 255, 255, 255, 255, 233, 0, 0, 0, 0, 139, 229, 93, 194, 16, 0, 85, 139, 236, 139, 125, 8, 139, 63, 87, 51, 192, 131, 201, 255, 242, 174, 95, 139, 241, 247, 214, 100, 161, 48, 0, 0, 0, 139, 64, 12, 139, 80, 12, 141, 64, 16, 255, 48, 51, 192, 82, 139, 74, 48, 15, 182, 28, 56, 15, 182, 20, 65, 43, 218, 131, 251, 0, 116, 12, 131, 251, 32, 116, 7, 131, 251, 224, 116, 2, 117, 9, 131, 192, 1, 59, 240, 116, 15, 117, 220, 90, 139, 18, 51, 192, 91, 59, 218, 83, 116, 6, 117, 203, 90, 139, 66, 24, 201, 194, 4, 0, 85, 139, 236, 139, 93, 8, 131, 251, 0, 116, 58, 139, 67, 60, 3, 195, 139, 80, 120, 3, 211, 139, 74, 24, 139, 66, 32, 81, 81, 80, 51, 192, 131, 201, 255, 139, 125, 12, 139, 63, 242, 174, 247, 209, 88, 81, 139, 125, 12, 139, 63, 139, 52, 24, 3, 243, 243, 166, 89, 116, 14, 131, 192, 4, 94, 78, 86, 117, 232, 51, 192, 201, 194, 8, 0, 94, 89, 43, 206, 139, 66, 36, 141, 4, 72, 15, 183, 4, 24, 139, 74, 28, 141, 4, 129, 139, 4, 24, 3, 195, 201, 194, 8, 0 })返回 (0 )变量名 | 类 型 | 静态 | 数组 | 备 注 | 标题 | 文本型 | | | 内容 | 文本型 | | | 地址 | 整数型 | | |
标题 = “标题”内容 = “内容”地址 = 汇编取API地址 (“user32.dll”, “MessageBoxA”)置入代码 ({ 106, 0, 255, 117, 252, 255, 117, 248, 106, 0, 255, 85, 244 })
|