哪位能解释一下ZwProtectVirtualMemory 的用法

[sf0002]

哪位能解释一下ZwProtectVirtualMemory 的用法?谢谢

[sf0002]

我想ZWProtectVirtualMemory->ZWWriteVirtualMemory,嘿嘿
ZWProtectVirtualMemory卡壳了

[嗷嗷叫的老马]

直接写内存

想写啥捏.....

R3的函数不好使么,非得使用内核函数..?

[sf0002]

ZwProtectVirtualMemory 是这样定义的,我想清零
Public Declare Function ZwProtectVirtualMemory _
Lib "ntdll.dll" (ByVal ProcessHandle As Long, _
ByVal BaseAddress As Long, _
ByVal RegionSize As Long, _
ByVal NewProtect As Long, _
ByVal OldProtect As Long) As Long
Public Const PAGE_READWRITE As Long = &H4
Public Const PAGE_GUARD As Long = &H100
Public Const PAGE_EXECUTE As Long = &H10
哪位能详细解释一下用法?谢

[嗷嗷叫的老马]

哦,想使用内存破坏法来结束进程呀?

这方面的问题你问在瑞星工作叫陈辉的那小子吧,他这方面长项呀,嘿嘿

多顶帖子,这几天他没时间上来.

[sf0002]

陈辉到瑞星去了?以前听说他要成为病毒分析师了
wait...

[ydlchina]

得顶顶

[嗷嗷叫的老马]

VirtualProtectEx的内核实现函数~~

用法差不多的.

[hjessica]

不了解A

[珍惜生命远离CPP]

呃 未公开函数？

[awperpvip]

调整内存读写访问权限...LZ要他有何贵干呐~

[boywang]

ByVal ProcessHandle As Long, _ 打开的程序句柄
ByVal BaseAddress As Long, _ 开始地址
ByVal RegionSize As Long, _ 地址范围
ByVal NewProtect As Long, _ 新的保护设置
ByVal OldProtect As Long) _ 旧的保护设置

[chenhui530]

把代码贴全点

[sf0002]

谢谢各位

[清晨曦月]

满有意思的................哪位是分析图片的高手啊..想请教二三~~~~