易语言DLL函数查看器源码系统结构:计算偏差,查看函数,加载皮肤,RtlMoveMemory_IMAGE_DOS_HEADER,RtlMoveMemory_IMAGE_NT_HEADERS32,RtlMoveMemory_IMAGE_IMPORT_DESCRIPTOR,RtlMoveMemory_IMAGE_EXPORT_DIRECTORY,RtlMoveMemory_IMAGE_TLS_DIRECTORY32,RtlMoveMemory_IMAGE_DEBUG_DIRECTORY,RtlMoveMemory_IMAGE_SECTION_HEADER, ======窗口程序集1 || ||——__启动窗口_创建完毕 || ||——_按钮1_被单击 || ||——_按钮2_被单击 || ||——__启动窗口_可否被关闭 || ||——_拖放对象1_得到文件 || ||——计算偏差 || ||——查看函数 || || ======调用的Dll || ||—[dll]——加载皮肤 || ||—[dll]——RtlMoveMemory_IMAGE_DOS_HEADER || ||—[dll]——RtlMoveMemory_IMAGE_NT_HEADERS32 || ||—[dll]——RtlMoveMemory_IMAGE_IMPORT_DESCRIPTOR || ||—[dll]——RtlMoveMemory_IMAGE_EXPORT_DIRECTORY || ||—[dll]——RtlMoveMemory_IMAGE_TLS_DIRECTORY32 || ||—[dll]——RtlMoveMemory_IMAGE_DEBUG_DIRECTORY || ||—[dll]——RtlMoveMemory_IMAGE_SECTION_HEADER 调用的DLL命令: .DLL命令加载皮肤,,"C:\WINDOWS\system32\SkinH_EL.dll","SkinH_Attach_Ex" .参数皮肤路径,文本型 .参数皮肤口令,文本型 .DLL命令RtlMoveMemory_IMAGE_DOS_HEADER,,,"RtlMoveMemory" .参数Destination,IMAGE_DOS_HEADER .参数Source,整数型 .参数Length,整数型 .DLL命令RtlMoveMemory_IMAGE_NT_HEADERS32,,,"RtlMoveMemory" .参数Destination,IMAGE_NT_HEADERS32 .参数Source,整数型 .参数Length,整数型 .DLL命令RtlMoveMemory_IMAGE_IMPORT_DESCRIPTOR,,,"RtlMoveMemory" .参数Destination,IMAGE_IMPORT_DESCRIPTOR .参数Source,整数型 .参数Length,整数型 .DLL命令RtlMoveMemory_IMAGE_EXPORT_DIRECTORY,,,"RtlMoveMemory" .参数Destination,IMAGE_EXPORT_DIRECTORY .参数Source,整数型 .参数Length,整数型 .DLL命令RtlMoveMemory_IMAGE_TLS_DIRECTORY32,,,"RtlMoveMemory" .参数Destination,IMAGE_TLS_DIRECTORY32 .参数Source,整数型 .参数Length,整数型 .DLL命令RtlMoveMemory_IMAGE_DEBUG_DIRECTORY,,,"RtlMoveMemory" .参数Destination,IMAGE_DEBUG_DIRECTORY .参数Source,整数型 .参数Length,整数型 .DLL命令RtlMoveMemory_IMAGE_SECTION_HEADER,,,"RtlMoveMemory" .参数Destination,IMAGE_SECTION_HEADER,数组 .参数Source,整数型 .参数Length,整数型
软件名称:
易语言DLL函数查看器源码
软件语言:
简体中文
源码大小:
111.23 KB
运行平台:
Winall,Win2003,WinXP,Win7,Win8
软件授权:
原文链接:https://blog.csdn.net/weixin_33208553/article/details/117347713?ops_request_misc=%257B%2522request%255Fid%2522%253A%2522167042854316800180664292%2522%252C%2522scm%2522%253A%252220140713.130102334.pc%255Fblog.%2522%257D&request_id=167042854316800180664292&biz_id=0&utm_medium=distribute.pc_search_result.none-task-blog-2~blog~first_rank_ecpm_v1~times_rank-21-117347713-null-null.nonecase&utm_term=%E6%98%93%E8%AF%AD%E8%A8%80%E6%BA%90%E7%A0%81