梓囚徒貧圭�鮗� ○ 賜 ★ 辛酔堀貧和鍬匈��梓囚徒貧議 Enter 囚辛指欺云慕朕村匈��梓囚徒貧圭�鮗� ● 辛指欺云匈競何��
!!!!隆堋響頼��紗秘慕禰厮宴和肝写偬堋響��
Database �� 1 USER32。DLL
e
l
b
a
t
e
for l
u
d
MODRefList o
m
pNextModRef o 2
t
n GDI32。DLL
MY。EXE i
x
e
d
n
i
0 �─�
3
ppdb
4 MYEXE。EXE
��
e
l
b
ta
e
pNextModRef l 5
u
d
o
m
o
t
n
i
x
4 e
d
n
i
�─�
6
ppdb
7 FOO。DLL
pNextModRef 8
9 ��index into module table��
ppdb 9 BAR。DLL
MODREF list
��MY。EXE uses KERNEL32 and BAR。DLL��
夕14´1 序殻 ��PDB �� 邑狛 仝MODREF 堪佩々銭俊欺凪侭聞喘議侭嗤庁翠
峇佩�潦毛渡犯─。�Priority��
厘�詢卉馬嶬斷兢�嬬校喘載醤悶議侘�麋タ緩�僚議序殻、庁翠、峇佩�潦盟法�仝峇佩並糞々
窟伏壓峇佩�潦棉輊錬�遇音壓序殻附貧。匆祥頁傍��CPU 電殻汽了頁峇佩�潦牟�掲序殻。電
殻匂象參電會議��頁耽倖峇佩�潦無柘渡犯─�
單枠幡議譜協蛍葎曾倖竣粁。厘厮将壓及1嫗初府狛。峇佩�潦無帖幻固彜麋法坑┰�殻��
748
´´´´´´´´´´´´´´´´´´´´´´Page 811´´´´´´´´´´´´´´´´´´´´´´´
14 MFC
及 嫗 謹�w殻塀�O��
啜嗤侭僚議單枠幡吉雫��priority class ��夕1´7����辛參壓CreateProcess 議歌方嶄譜協。
峇佩�潦婿�云貧写覚徭凪仝幻牌寄繁々議單枠幡吉雫��隼朔壅紗貧CreateThread 歌方嶄議
裏距餓駆�─�2~��2 ��。資誼議潤惚��夕1´8��宴頁峇佩�潦無痛�僚base priority ��袈律貫0~31
方峙囹互單枠幡囹互。�今�SetThreadPriority 頁距屁單枠幡議垢醤��万侭峺協議匆頁裏距餓
駆�─�2~��2 ��。
IMTE �Y�� Module Database ��MDB��
00h DWORD un1 IMAGE_NT_HEADERS �此�
DWORD Signature
04h PIMAGE_NT_HEADERS pNTHdr IMAGE_FILE_HEADER FileHeader �此�
08h DWORD un2 WORD Machine�察�
0Ch PSTR pszFileName WORD NumberOfSections�察�
10h PSTR pszModName DWORD TimeDateStamp�察�
14h WORD cbFileName DWORD PointerToSymbolTable�察�
DWORD NumberOfSymbols�察�
16h WORD cbModName
WORD SizeOfOptionalHeader�察�
18h DWORD un3 WORD Characteristics�察�
1Ch DWORD cSections IMAGE_OPTIONAL_HEADER OptionalHeader �此�
20h DWORD un5 WORD Magic�察�
24h DWORD baseAddress/Module Handle BYTE MajorLinkerVersion�察�
BYTE MinorLinkerVersion�察�
28h WORD hModule16
DWORD SizeOfCode�察�
2Ah WORD cUsage DWORD SizeOfInitializedData�察�
2Ch DWORD un7 DWORD SizeOfUninitializedData�察�
30h PSTR pszFileName2 DWORD AddressOfEntryPoint�察�
34h WORD cbFileName2 DWORD BaseOfCode�察�
DWORD BaseOfData�察�
36h DWORD pszModName2
DWORD ImageBase�察�
3Ah WORD cbModName2 DWORD SectionAlignment�察�