unit NewKernelHandler;

interface
uses windows,sysutils,tlhelp32;

const dbkdll='baby.dll';

type TReadProcessMemory=function(hProcess: THandle; const lpBaseAddress: Pointer; lpBuffer: Pointer;  nSize: DWORD; var lpNumberOfBytesRead: DWORD): BOOL; stdcall;
type TWriteProcessMemory=function(hProcess: THandle; const lpBaseAddress: Pointer; lpBuffer: Pointer; nSize: DWORD; var lpNumberOfBytesWritten: DWORD): BOOL; stdcall;
type TOpenProcess=function(dwDesiredAccess: DWORD; bInheritHandle: BOOL; dwProcessId: DWORD): THandle; stdcall;

//这里定义 是kernel32.dll中的API 么？ 还是自定义？

procedure LoadDBK32;

var
  KernelOpenProcess       :TOpenProcess;     //
  KernelReadProcessMemory :TReadProcessMemory;//
  KernelWriteProcessMemory:TWriteProcessMemory;//这里 上面定义了 为什么出现这个是什么意思

var
    DarkByteKernel: Thandle;

implementation

procedure LoadDBK32;
begin
  if DarkByteKernel=0 then
  begin
    DarkByteKernel:= LoadLibrary(dbkdll);
    if DarkByteKernel=0 then exit;

    KernelOpenProcess:=GetProcAddress(darkbytekernel,'OP');
    KernelReadProcessMemory:=GetProcAddresS(darkbytekernel,'RPM');
    KernelWriteProcessMemory:=GetProcAddress(darkbytekernel,'WPM');

//为什么这里得到这个

  end;
end;
end.

希望能得到大家的帮助！

详细的讲下这个源码什么意思饿 ...

[培训]科锐逆向工程师培训第53期2025年7月8日开班！