易语言DLL函数查看器源码

系统结构:计算偏差,查看函数,加载皮肤,RtlMoveMemory_IMAGE_DOS_HEADER,RtlMoveMemory_IMAGE_NT_HEADERS32,RtlMoveMemory_IMAGE_IMPORT_DESCRIPTOR,RtlMoveMemory_IMAGE_EXPORT_DIRECTORY,RtlMoveMemory_IMAGE_TLS_DIRECTORY32,RtlMoveMemory_IMAGE_DEBUG_DIRECTORY,RtlMoveMemory_IMAGE_SECTION_HEADER,

======窗口程序集1
           |  |
           |  |------ __启动窗口_创建完毕
           |  |
           |  |------ _按钮1_被单击
           |  |
           |  |------ _按钮2_被单击
           |  |
           |  |------ __启动窗口_可否被关闭
           |  |
           |  |------ _拖放对象1_得到文件
           |  |
           |  |------ 计算偏差
           |  |
           |  |------ 查看函数
           |  |
           |  |
======调用的Dll
           |  |
           |  |---[dll]------   加载皮肤
           |  |
           |  |---[dll]------   RtlMoveMemory_IMAGE_DOS_HEADER
           |  |
           |  |---[dll]------   RtlMoveMemory_IMAGE_NT_HEADERS32
           |  |
           |  |---[dll]------   RtlMoveMemory_IMAGE_IMPORT_DESCRIPTOR
           |  |
           |  |---[dll]------   RtlMoveMemory_IMAGE_EXPORT_DIRECTORY
           |  |
           |  |---[dll]------   RtlMoveMemory_IMAGE_TLS_DIRECTORY32
           |  |
           |  |---[dll]------   RtlMoveMemory_IMAGE_DEBUG_DIRECTORY
           |  |
           |  |---[dll]------   RtlMoveMemory_IMAGE_SECTION_HEADER

调用的DLL命令:

.DLL命令 加载皮肤, , "C:\WINDOWS\system32\SkinH_EL.dll", "SkinH_Attach_Ex"
    .参数 皮肤路径, 文本型
    .参数 皮肤口令, 文本型

.DLL命令 RtlMoveMemory_IMAGE_DOS_HEADER, , , "RtlMoveMemory"
    .参数 Destination, IMAGE_DOS_HEADER
    .参数 Source, 整数型
    .参数 Length, 整数型

.DLL命令 RtlMoveMemory_IMAGE_NT_HEADERS32, , , "RtlMoveMemory"
    .参数 Destination, IMAGE_NT_HEADERS32
    .参数 Source, 整数型
    .参数 Length, 整数型

.DLL命令 RtlMoveMemory_IMAGE_IMPORT_DESCRIPTOR, , , "RtlMoveMemory"
    .参数 Destination, IMAGE_IMPORT_DESCRIPTOR
    .参数 Source, 整数型
    .参数 Length, 整数型

.DLL命令 RtlMoveMemory_IMAGE_EXPORT_DIRECTORY, , , "RtlMoveMemory"
    .参数 Destination, IMAGE_EXPORT_DIRECTORY
    .参数 Source, 整数型
    .参数 Length, 整数型

.DLL命令 RtlMoveMemory_IMAGE_TLS_DIRECTORY32, , , "RtlMoveMemory"
    .参数 Destination, IMAGE_TLS_DIRECTORY32
    .参数 Source, 整数型
    .参数 Length, 整数型

.DLL命令 RtlMoveMemory_IMAGE_DEBUG_DIRECTORY, , , "RtlMoveMemory"
    .参数 Destination, IMAGE_DEBUG_DIRECTORY
    .参数 Source, 整数型
    .参数 Length, 整数型

.DLL命令 RtlMoveMemory_IMAGE_SECTION_HEADER, , , "RtlMoveMemory"
    .参数 Destination, IMAGE_SECTION_HEADER, 数组
    .参数 Source, 整数型
    .参数 Length, 整数型