findcodeaddr.cpp

“网络安全技术实践与代码详解”实例代码

// FindCodeAddr.cpp : Defines the entry point for the console application.
//

#include "stdafx.h"
#include "FindCodeAddr.h"

#ifdef _DEBUG
#define new DEBUG_NEW
#undef THIS_FILE
static char THIS_FILE[] = __FILE__;
#endif

/////////////////////////////////////////////////////////////////////////////
// The one and only application object

CWinApp theApp;

using namespace std;

int _tmain(int argc, TCHAR* argv[], TCHAR* envp[])
{
	int nRetCode = 0;

	// initialize MFC and print and error on failure
	if (!AfxWinInit(::GetModuleHandle(NULL), NULL, ::GetCommandLine(), 0))
	{
		// TODO: change error code to suit your needs
		cerr << _T("Fatal Error: MFC initialization failed") << endl;
		nRetCode = 1;
	}
	else
	{
		// TODO: code your application's behavior here.
#if 0 
		return 0; 
		__asm jmp esp 
			
#else 
			
			bool we_loaded_it = false; 
		HINSTANCE h; 
		TCHAR dllname[] = _T("User32"); 
		
		h = GetModuleHandle(dllname); 
		if(h == NULL) 
		{ 
			h = LoadLibrary(dllname); 
			if(h == NULL) 
			{ 
				cout<<"ERROR LOADING DLL: "<<dllname<<endl; 
				return 1; 
			} 
			we_loaded_it = true; 
		} 
		
		BYTE* ptr = (BYTE*)h; 
		bool done = false; 
		for(int y = 0;!done;y++) 
		{ 
			try 
			{ 
				if(ptr[y] == 0xFF && ptr[y+1] == 0xE4) 
				{ 
					int pos = (int)ptr + y; 
					cout<<"OPCODE found at 0x"<<hex<<pos<<endl; 
				} 
			} 
			catch(...) 
			{ 
				cout<<"END OF "<<dllname<<" MEMORY REACHED"<<endl; 
				done = true; 
			} 
		} 
		
		if(we_loaded_it) FreeLibrary(h); 
#endif 


	}

	return nRetCode;
}