{
    "componentChunkName": "component---src-templates-post-js",
    "path": "/posts/crack-fullscreen-watermark/",
    "result": {"data":{"mdx":{"id":"46586264-f96f-59c2-b0d1-94d5d358925b","excerpt":"逻辑分析 对于全屏水印，可能是打开了一个全屏透明的窗口，并将该窗口置顶，先尝试关闭该窗口。\n使用火绒的弹窗拦截尝试屏蔽该弹窗，发现拦截后会继续弹窗，弹窗后再次拦截，出现了水印闪烁的情况\n 使用火绒剑观察发现图片水印被保存到文件中 代码分析 用 x64dbg 附加目标进程, 点击重新运行后进入 ntdll.dll…","body":"var _excluded = [\"components\"];\n\nfunction _extends() { _extends = Object.assign || function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; }; return _extends.apply(this, arguments); }\n\nfunction _objectWithoutProperties(source, excluded) { if (source == null) return {}; var target = _objectWithoutPropertiesLoose(source, excluded); var key, i; if (Object.getOwnPropertySymbols) { var sourceSymbolKeys = Object.getOwnPropertySymbols(source); for (i = 0; i < sourceSymbolKeys.length; i++) { key = sourceSymbolKeys[i]; if (excluded.indexOf(key) >= 0) continue; if (!Object.prototype.propertyIsEnumerable.call(source, key)) continue; target[key] = source[key]; } } return target; }\n\nfunction _objectWithoutPropertiesLoose(source, excluded) { if (source == null) return {}; var target = {}; var sourceKeys = Object.keys(source); var key, i; for (i = 0; i < sourceKeys.length; i++) { key = sourceKeys[i]; if (excluded.indexOf(key) >= 0) continue; target[key] = source[key]; } return target; }\n\n/* @jsxRuntime classic */\n\n/* @jsx mdx */\nvar _frontmatter = {\n  \"title\": \"记一次破解全屏水印的思路\",\n  \"datePublished\": \"2021-12-27\",\n  \"dateModified\": \"2021-12-28\",\n  \"tags\": [\"programming\", \"crack\"]\n};\nvar layoutProps = {\n  _frontmatter: _frontmatter\n};\nvar MDXLayout = \"wrapper\";\nreturn function MDXContent(_ref) {\n  var components = _ref.components,\n      props = _objectWithoutProperties(_ref, _excluded);\n\n  return mdx(MDXLayout, _extends({}, layoutProps, props, {\n    components: components,\n    mdxType: \"MDXLayout\"\n  }), mdx(\"h2\", null, \"\\u903B\\u8F91\\u5206\\u6790\"), mdx(\"p\", null, \"\\u5BF9\\u4E8E\\u5168\\u5C4F\\u6C34\\u5370\\uFF0C\\u53EF\\u80FD\\u662F\\u6253\\u5F00\\u4E86\\u4E00\\u4E2A\\u5168\\u5C4F\\u900F\\u660E\\u7684\\u7A97\\u53E3\\uFF0C\\u5E76\\u5C06\\u8BE5\\u7A97\\u53E3\\u7F6E\\u9876\\uFF0C\\u5148\\u5C1D\\u8BD5\\u5173\\u95ED\\u8BE5\\u7A97\\u53E3\\u3002\\n\\u4F7F\\u7528\\u706B\\u7ED2\\u7684\\u5F39\\u7A97\\u62E6\\u622A\\u5C1D\\u8BD5\\u5C4F\\u853D\\u8BE5\\u5F39\\u7A97\\uFF0C\\u53D1\\u73B0\\u62E6\\u622A\\u540E\\u4F1A\\u7EE7\\u7EED\\u5F39\\u7A97\\uFF0C\\u5F39\\u7A97\\u540E\\u518D\\u6B21\\u62E6\\u622A\\uFF0C\\u51FA\\u73B0\\u4E86\\u6C34\\u5370\\u95EA\\u70C1\\u7684\\u60C5\\u51B5\\n\", mdx(\"figure\", {\n    parentName: \"p\",\n    \"className\": \"gatsby-resp-image-figure\",\n    \"style\": {}\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"650px\"\n    }\n  }, \"\\n      \", mdx(\"a\", {\n    parentName: \"span\",\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/b414d9c5bf36124172a6e4fd4a64d5a5/0d0e4/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228101845.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"65.6441717791411%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAANCAYAAACpUE5eAAAACXBIWXMAABYlAAAWJQFJUiTwAAABNElEQVQ4y7WTTU7DMBCFc31OwCHYcgf2bMqG3yiKSNIQ0+DEP+MPjdOqLUUCiWLpxZM3npc3sV1gGwYz0hlH17as1z1fR0ppF5xwOkcBAWKMFEqn+yt4uc7CZVlS1zVVVfH49Iy104nAggPOb0jvDzku8vP2Au4uGa2naV5p25a27TBNid90R0IHFvfh1JGam0UweM9gLC7oGtk7WJaSJCIiGcp775nnGZGERI9MfW5Xth8txFs+6hVvw4CK/zQmazHGLC/hA4bV1rBsBaPHbiq69ZpxHPOPVRchhCMopzkzDPR9T3QTbhoZ+yrnvDW5i0JSYg6ReZpyoZJa+B00p+0655AwE0Ng9poLRGcXh5x5FPtjcB6cX/BfWt6dsT9B4uJQd0+vl+7w8dX6LZYasT0pOD4BHf3/vxAIlZIAAAAASUVORK5CYII=')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  }), \"\\n  \", mdx(\"img\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"火绒弹窗拦截\",\n    \"title\": \"火绒弹窗拦截\",\n    \"src\": \"/static/b414d9c5bf36124172a6e4fd4a64d5a5/a6d36/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228101845.png\",\n    \"srcSet\": [\"/static/b414d9c5bf36124172a6e4fd4a64d5a5/222b7/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228101845.png 163w\", \"/static/b414d9c5bf36124172a6e4fd4a64d5a5/ff46a/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228101845.png 325w\", \"/static/b414d9c5bf36124172a6e4fd4a64d5a5/a6d36/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228101845.png 650w\", \"/static/b414d9c5bf36124172a6e4fd4a64d5a5/e548f/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228101845.png 975w\", \"/static/b414d9c5bf36124172a6e4fd4a64d5a5/0d0e4/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228101845.png 1230w\"],\n    \"sizes\": \"(max-width: 650px) 100vw, 650px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\",\n    \"decoding\": \"async\"\n  }), \"\\n  \"), \"\\n    \"), \"\\n    \", mdx(\"figcaption\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-figcaption\"\n  }, \"\\u706B\\u7ED2\\u5F39\\u7A97\\u62E6\\u622A\"), \"\\n  \")), mdx(\"pre\", {\n    \"className\": \"shiki solarized-light\",\n    \"style\": {\n      \"backgroundColor\": \"#FDF6E3\",\n      \"color\": \"#657B83\"\n    }\n  }, mdx(\"div\", {\n    parentName: \"pre\",\n    \"className\": \"language-id\"\n  }, \"js\"), mdx(\"div\", {\n    parentName: \"pre\",\n    \"className\": \"code-container\"\n  }, mdx(\"code\", {\n    parentName: \"div\"\n  }, mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#93A1A1\"\n    }\n  }, \"// \\u4F2A\\u4EE3\\u7801\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"while\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"true\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"){\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"  \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"checkWatermarkWindow\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"();\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"  \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"sleep\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"();\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"}\"))))), mdx(\"p\", null, \"\\u4F7F\\u7528\\u706B\\u7ED2\\u5251\\u89C2\\u5BDF\\u53D1\\u73B0\\u56FE\\u7247\\u6C34\\u5370\\u88AB\\u4FDD\\u5B58\\u5230\\u6587\\u4EF6\\u4E2D\"), mdx(\"p\", null, mdx(\"figure\", {\n    parentName: \"p\",\n    \"className\": \"gatsby-resp-image-figure\",\n    \"style\": {}\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"650px\"\n    }\n  }, \"\\n      \", mdx(\"a\", {\n    parentName: \"span\",\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/b0bc8c2192685ae699362a6612a10785/ce0a7/image-20211228143041980.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"44.78527607361963%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  }), \"\\n  \", mdx(\"img\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"image-20211228143041980\",\n    \"title\": \"image-20211228143041980\",\n    \"src\": \"/static/b0bc8c2192685ae699362a6612a10785/a6d36/image-20211228143041980.png\",\n    \"srcSet\": [\"/static/b0bc8c2192685ae699362a6612a10785/222b7/image-20211228143041980.png 163w\", \"/static/b0bc8c2192685ae699362a6612a10785/ff46a/image-20211228143041980.png 325w\", \"/static/b0bc8c2192685ae699362a6612a10785/a6d36/image-20211228143041980.png 650w\", \"/static/b0bc8c2192685ae699362a6612a10785/e548f/image-20211228143041980.png 975w\", \"/static/b0bc8c2192685ae699362a6612a10785/3c492/image-20211228143041980.png 1300w\", \"/static/b0bc8c2192685ae699362a6612a10785/ce0a7/image-20211228143041980.png 1590w\"],\n    \"sizes\": \"(max-width: 650px) 100vw, 650px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\",\n    \"decoding\": \"async\"\n  }), \"\\n  \"), \"\\n    \"), \"\\n    \", mdx(\"figcaption\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-figcaption\"\n  }, \"image-20211228143041980\"), \"\\n  \")), mdx(\"h2\", null, \"\\u4EE3\\u7801\\u5206\\u6790\"), mdx(\"p\", null, \"\\u7528 x64dbg \\u9644\\u52A0\\u76EE\\u6807\\u8FDB\\u7A0B, \\u70B9\\u51FB\\u91CD\\u65B0\\u8FD0\\u884C\\u540E\\u8FDB\\u5165 ntdll.dll \\u518D\\u70B9\\u51FB\\u8FD0\\u884C\\u8FDB\\u5165\\u7A0B\\u5E8F\\u5165\\u53E3,\\u518D\\u70B9\\u51FB\\u8FD0\\u884C\\u4F7F\\u7A0B\\u5E8F\\u6B63\\u5E38\\u8FD0\\u884C\\u3002\"), mdx(\"p\", null, \"\\u5728\\u7B26\\u53F7\\u4E2D \\u627E\\u5230 \\u6C34\\u5370\\u6A21\\u5757\\uFF0C\\u53D1\\u73B0\\u5BFC\\u5165\\u4E86 gdiplus.GdipSaveImageToFile \\u4FDD\\u5B58\\u56FE\\u7247\\u5230\\u6587\\u4EF6\\u3002 \\u53CC\\u51FB\\u8FDB\\u5165\\u8BE5\\u65B9\\u6CD5\\u5165\\u53E3 \\u6309 F2 \\u4E0B\\u65AD\\n\", mdx(\"figure\", {\n    parentName: \"p\",\n    \"className\": \"gatsby-resp-image-figure\",\n    \"style\": {}\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"650px\"\n    }\n  }, \"\\n      \", mdx(\"a\", {\n    parentName: \"span\",\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/82519808bc1be9b5c5bdcfea6301fdb4/3a5d5/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"71.77914110429448%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  }), \"\\n  \", mdx(\"img\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"x64dbg 模块\",\n    \"title\": \"x64dbg 模块\",\n    \"src\": \"/static/82519808bc1be9b5c5bdcfea6301fdb4/a6d36/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png\",\n    \"srcSet\": [\"/static/82519808bc1be9b5c5bdcfea6301fdb4/222b7/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png 163w\", \"/static/82519808bc1be9b5c5bdcfea6301fdb4/ff46a/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png 325w\", \"/static/82519808bc1be9b5c5bdcfea6301fdb4/a6d36/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png 650w\", \"/static/82519808bc1be9b5c5bdcfea6301fdb4/e548f/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png 975w\", \"/static/82519808bc1be9b5c5bdcfea6301fdb4/3c492/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png 1300w\", \"/static/82519808bc1be9b5c5bdcfea6301fdb4/3a5d5/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228113702.png 1807w\"],\n    \"sizes\": \"(max-width: 650px) 100vw, 650px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\",\n    \"decoding\": \"async\"\n  }), \"\\n  \"), \"\\n    \"), \"\\n    \", mdx(\"figcaption\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-figcaption\"\n  }, \"x64dbg \\u6A21\\u5757\"), \"\\n  \"), \"\\n\\u5728\\u8F6F\\u4EF6\\u4E2D\\u767B\\u5F55\\u8D26\\u53F7\\uFF0C\\u7A0B\\u5E8F\\u5728\\u65AD\\u70B9\\u5904\\u505C\\u4E0B\\uFF0C\\u7EE7\\u7EED\\u8FD0\\u884C\\u5FFD\\u7565\\u6389\\u975E\\u5173\\u952E\\u6587\\u4EF6\\uFF0C\\u6765\\u5230\\u6B64\\u5904\\n\", mdx(\"figure\", {\n    parentName: \"p\",\n    \"className\": \"gatsby-resp-image-figure\",\n    \"style\": {}\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"650px\"\n    }\n  }, \"\\n      \", mdx(\"a\", {\n    parentName: \"span\",\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/2675310010b7dba71dea5567f7f9f951/defc9/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"38.65030674846626%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  }), \"\\n  \", mdx(\"img\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"x64dbg CPU\",\n    \"title\": \"x64dbg CPU\",\n    \"src\": \"/static/2675310010b7dba71dea5567f7f9f951/a6d36/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png\",\n    \"srcSet\": [\"/static/2675310010b7dba71dea5567f7f9f951/222b7/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png 163w\", \"/static/2675310010b7dba71dea5567f7f9f951/ff46a/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png 325w\", \"/static/2675310010b7dba71dea5567f7f9f951/a6d36/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png 650w\", \"/static/2675310010b7dba71dea5567f7f9f951/e548f/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png 975w\", \"/static/2675310010b7dba71dea5567f7f9f951/3c492/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png 1300w\", \"/static/2675310010b7dba71dea5567f7f9f951/defc9/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20211228105758.png 2046w\"],\n    \"sizes\": \"(max-width: 650px) 100vw, 650px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\",\n    \"decoding\": \"async\"\n  }), \"\\n  \"), \"\\n    \"), \"\\n    \", mdx(\"figcaption\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-figcaption\"\n  }, \"x64dbg CPU\"), \"\\n  \")), mdx(\"p\", null, \"\\u8FD0\\u884C\\u5230\\u8FD4\\u56DE \\u518D \\u6B65\\u8FDB\\u4E00\\u6B21 \\u5373\\u53EF\\u6765\\u5230\\u8BE5\\u65B9\\u6CD5\\u7684\\u8C03\\u7528\\u4F4D\\u7F6E\\u3002 \\u91CD\\u590D\\u8BE5\\u6B65\\u9AA4\\uFF0C\\u53D1\\u73B0\\u5C4F\\u5E55\\u4E0A\\u51FA\\u73B0\\u4E86\\u6C34\\u5370\\u3002\\n\\u6700\\u540E\\u6765\\u5230\\u4E86\\u5173\\u952E\\u4E4B\\u5904\"), mdx(\"p\", null, mdx(\"figure\", {\n    parentName: \"p\",\n    \"className\": \"gatsby-resp-image-figure\",\n    \"style\": {}\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"650px\"\n    }\n  }, \"\\n      \", mdx(\"a\", {\n    parentName: \"span\",\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/ac8f3cad242f4552b818c6a95d10a040/21e8f/image-20211228130844553.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"38.65030674846626%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  }), \"\\n  \", mdx(\"img\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"image-20211228130844553\",\n    \"title\": \"image-20211228130844553\",\n    \"src\": \"/static/ac8f3cad242f4552b818c6a95d10a040/a6d36/image-20211228130844553.png\",\n    \"srcSet\": [\"/static/ac8f3cad242f4552b818c6a95d10a040/222b7/image-20211228130844553.png 163w\", \"/static/ac8f3cad242f4552b818c6a95d10a040/ff46a/image-20211228130844553.png 325w\", \"/static/ac8f3cad242f4552b818c6a95d10a040/a6d36/image-20211228130844553.png 650w\", \"/static/ac8f3cad242f4552b818c6a95d10a040/e548f/image-20211228130844553.png 975w\", \"/static/ac8f3cad242f4552b818c6a95d10a040/3c492/image-20211228130844553.png 1300w\", \"/static/ac8f3cad242f4552b818c6a95d10a040/21e8f/image-20211228130844553.png 1684w\"],\n    \"sizes\": \"(max-width: 650px) 100vw, 650px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\",\n    \"decoding\": \"async\"\n  }), \"\\n  \"), \"\\n    \"), \"\\n    \", mdx(\"figcaption\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-figcaption\"\n  }, \"image-20211228130844553\"), \"\\n  \")), mdx(\"p\", null, \"\\u8FD9\\u91CC\\u53EF\\u4EE5\\u4FEE\\u6539 call \\u4E3A nop \\u4EE5\\u4E0D\\u6267\\u884C\\u6C34\\u5370\\u65B9\\u6CD5\\u3002\"), mdx(\"h2\", null, \"\\u7834\\u89E3\\u65B9\\u6CD5\"), mdx(\"p\", null, \"\\u5C06 6B69CDE3 \\u5904\\u7684 call fwatermarksc.6B69C080 \\u6539\\u4E3A nop \\u5373\\u53EF\\uFF0C \\u4FEE\\u8865\\u6587\\u4EF6\\u4EE5\\u5C06\\u6539\\u52A8\\u4FDD\\u5B58\\u5230\\u6587\\u4EF6\\u3002\\n\", mdx(\"figure\", {\n    parentName: \"p\",\n    \"className\": \"gatsby-resp-image-figure\",\n    \"style\": {}\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"650px\"\n    }\n  }, \"\\n      \", mdx(\"a\", {\n    parentName: \"span\",\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/b3154/image-20211228131512439.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"39.263803680981596%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  }), \"\\n  \", mdx(\"img\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"image-20211228131512439\",\n    \"title\": \"image-20211228131512439\",\n    \"src\": \"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/a6d36/image-20211228131512439.png\",\n    \"srcSet\": [\"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/222b7/image-20211228131512439.png 163w\", \"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/ff46a/image-20211228131512439.png 325w\", \"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/a6d36/image-20211228131512439.png 650w\", \"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/e548f/image-20211228131512439.png 975w\", \"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/3c492/image-20211228131512439.png 1300w\", \"/static/f2f9bbe6ee9b5a6c7022fda62d141c33/b3154/image-20211228131512439.png 1681w\"],\n    \"sizes\": \"(max-width: 650px) 100vw, 650px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\",\n    \"decoding\": \"async\"\n  }), \"\\n  \"), \"\\n    \"), \"\\n    \", mdx(\"figcaption\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-figcaption\"\n  }, \"image-20211228131512439\"), \"\\n  \")), mdx(\"undefined\", null, mdx(\"pre\", {\n    \"className\": \"shiki solarized-light\",\n    \"style\": {\n      \"backgroundColor\": \"#FDF6E3\",\n      \"color\": \"#657B83\"\n    }\n  }, mdx(\"div\", {\n    parentName: \"pre\",\n    \"className\": \"code-container\"\n  }, mdx(\"code\", {\n    parentName: \"div\"\n  }, \">fwatermarksc.dll\\n0001CDE3:E8->90\\n0001CDE4:98->90\\n0001CDE5:F2->90\\n0001CDE6:FF->90\\n0001CDE7:FF->90\")))), mdx(\"p\", null, \"\\u5BF9\\u5E94\\u6587\\u4EF6\\u504F\\u79FB 1C1E3 \\u4F7F\\u7528\\u5176\\u5B83 \\u652F\\u6301 hex \\u7684\\u7F16\\u8F91\\u5668\\u4E5F\\u53EF\\u4EE5\\u3002\"), mdx(\"p\", null, mdx(\"figure\", {\n    parentName: \"p\",\n    \"className\": \"gatsby-resp-image-figure\",\n    \"style\": {}\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"650px\"\n    }\n  }, \"\\n      \", mdx(\"a\", {\n    parentName: \"span\",\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/e0d329b6754446d2bccca6d2d3104b4f/3a188/image-20211228131640733.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }, \"\\n    \", mdx(\"span\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"40.49079754601227%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  }), \"\\n  \", mdx(\"img\", {\n    parentName: \"a\",\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"image-20211228131640733\",\n    \"title\": \"image-20211228131640733\",\n    \"src\": \"/static/e0d329b6754446d2bccca6d2d3104b4f/a6d36/image-20211228131640733.png\",\n    \"srcSet\": [\"/static/e0d329b6754446d2bccca6d2d3104b4f/222b7/image-20211228131640733.png 163w\", \"/static/e0d329b6754446d2bccca6d2d3104b4f/ff46a/image-20211228131640733.png 325w\", \"/static/e0d329b6754446d2bccca6d2d3104b4f/a6d36/image-20211228131640733.png 650w\", \"/static/e0d329b6754446d2bccca6d2d3104b4f/e548f/image-20211228131640733.png 975w\", \"/static/e0d329b6754446d2bccca6d2d3104b4f/3c492/image-20211228131640733.png 1300w\", \"/static/e0d329b6754446d2bccca6d2d3104b4f/3a188/image-20211228131640733.png 1623w\"],\n    \"sizes\": \"(max-width: 650px) 100vw, 650px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\",\n    \"decoding\": \"async\"\n  }), \"\\n  \"), \"\\n    \"), \"\\n    \", mdx(\"figcaption\", {\n    parentName: \"figure\",\n    \"className\": \"gatsby-resp-image-figcaption\"\n  }, \"image-20211228131640733\"), \"\\n  \")), mdx(\"h2\", null, \"\\u89C4\\u907F\\u7B7E\\u540D\\u9A8C\\u8BC1\"), mdx(\"p\", null, \"\\u4FDD\\u5B58\\u6587\\u4EF6\\u540E\\u8FD0\\u884C\\u7A0B\\u5E8F\\u8FD8\\u53D1\\u73B0\\u7A0B\\u5E8F\\u6821\\u9A8C\\u4E86 fwatermarksc.dll \\u7684\\u6587\\u4EF6\\u7B7E\\u540D\\u3002\\n\\u8FD9\\u91CC\\u53EF\\u4EE5\\u4E0D\\u4FEE\\u6539\\u6587\\u4EF6\\uFF0C\\u901A\\u8FC7\\u76F4\\u63A5\\u4FEE\\u6539\\u5185\\u5B58\\u6765\\u8DF3\\u8FC7\\u6C34\\u5370\\u65B9\\u6CD5\"), mdx(\"pre\", {\n    \"className\": \"shiki solarized-light\",\n    \"style\": {\n      \"backgroundColor\": \"#FDF6E3\",\n      \"color\": \"#657B83\"\n    }\n  }, mdx(\"div\", {\n    parentName: \"pre\",\n    \"className\": \"language-id\"\n  }, \"cpp\"), mdx(\"div\", {\n    parentName: \"pre\",\n    \"className\": \"code-container\"\n  }, mdx(\"code\", {\n    parentName: \"div\"\n  }, mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"#include\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"<wtypes.h>\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"#include\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"<WinUser.h>\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"#include\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"<TlHelp32.h>\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"const\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"char\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"*\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"targetProcessName \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"\\\"xxx.exe\\\"\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"const\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"char\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"*\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"targetModuleName \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"\\\"fwatermarksc.dll\\\"\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#93A1A1\"\n    }\n  }, \"// \\u4EE3\\u7801\\u504F\\u79FB\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"int\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" lpBaseAddress \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"0x\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"1CDE3\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"DWORD\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"GetProcessID\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"const\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"char\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"*\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"lpName) {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    HANDLE hSnapshot \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"CreateToolhelp32Snapshot\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(TH32CS_SNAPPROCESS, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"0\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \");\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"if\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (INVALID_HANDLE_VALUE \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"==\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" hSnapshot) {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"NULL\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    }\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    PROCESSENTRY32 processEntry \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" {\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"sizeof\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(processEntry)};\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    BOOL fOk;\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"for\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (fOk \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"Process32First\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(hSnapshot, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"&\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"processEntry); fOk; fOk \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"Process32Next\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(hSnapshot, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"&\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"processEntry)) {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"if\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"strcmp\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"processEntry\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \".\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"szExeFile\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", lpName) \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"==\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"0\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \") {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"            \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"CloseHandle\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(hSnapshot);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"            \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"processEntry\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \".\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"th32ProcessID\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        }\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    }\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"NULL\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"}\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"HMODULE\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"GetProcessModuleHandle\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"DWORD\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" pid, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"CONST\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"CHAR\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"*\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"moduleName) {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    HANDLE hSnapshot \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"CreateToolhelp32Snapshot\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(TH32CS_SNAPMODULE, pid);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"if\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (INVALID_HANDLE_VALUE \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"==\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" hSnapshot) {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"nullptr\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    }\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    MODULEENTRY32 moduleEntry \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" {\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"sizeof\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(moduleEntry)};\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    BOOL fOk;\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"for\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (fOk \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"Module32First\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(hSnapshot, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"&\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"moduleEntry); fOk; fOk \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"Module32Next\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(hSnapshot, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"&\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"moduleEntry)) {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"if\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"strcmp\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"moduleEntry\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \".\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"szModule\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", moduleName) \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"==\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"0\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \") {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"            \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"CloseHandle\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(hSnapshot);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"            \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"moduleEntry\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \".\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"hModule\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        }\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    }\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"nullptr\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"}\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"int\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"main\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"() {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#93A1A1\"\n    }\n  }, \"    // \\u83B7\\u53D6\\u8FDB\\u7A0B\\u7F16\\u53F7\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    DWORD processID \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"GetProcessID\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(targetProcessName);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#93A1A1\"\n    }\n  }, \"    // \\u83B7\\u53D6\\u8FDB\\u7A0B\\u53E5\\u67C4\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    HANDLE processHandle \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"OpenProcess\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(PROCESS_ALL_ACCESS, FALSE, processID);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"if\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (processHandle \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"==\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"nullptr\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \") {\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        ::\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"MessageBox\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"nullptr\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"\\\"ERROR: Process not found.\\\"\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"\\\"WatermarkCracker\\\"\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", MB_ICONERROR);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"        \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"0\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    }\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#93A1A1\"\n    }\n  }, \"    // \\u53D6\\u5F97\\u6C34\\u5370\\u6A21\\u5757\\u57FA\\u5740\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    HMODULE moduleBaseAddress \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"GetProcessModuleHandle\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(processID, targetModuleName);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#93A1A1\"\n    }\n  }, \"    // \\u4EE3\\u7801\\u5730\\u5740\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"int\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" codeAddress \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" (\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#073642\"\n    }\n  }, \"int\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \") moduleBaseAddress \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"+\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" lpBaseAddress;\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#93A1A1\"\n    }\n  }, \"    // NOP\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    BYTE \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"shellData\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"[\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"5\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"] \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" {\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"0x\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"90\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"0x\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"90\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"0x\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"90\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"0x\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"90\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"0x\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"90\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"};\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    SIZE_T lpNumberOfBytesWritten \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"=\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"0\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"WriteProcessMemory\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(processHandle, (LPVOID) codeAddress, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"&\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"shellData, \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"sizeof\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(shellData), \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"&\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"lpNumberOfBytesWritten);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"CloseHandle\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(processHandle);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    ::\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#268BD2\"\n    }\n  }, \"MessageBox\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"(\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#B58900\"\n    }\n  }, \"nullptr\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"\\\"Success\\\"\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#2AA198\"\n    }\n  }, \"\\\"WatermarkCracker\\\"\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \", MB_ICONINFORMATION);\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"    \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#859900\"\n    }\n  }, \"return\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \" \"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#D33682\"\n    }\n  }, \"0\"), mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \";\")), mdx(\"div\", {\n    parentName: \"code\",\n    \"className\": \"line\"\n  }, mdx(\"span\", {\n    parentName: \"div\",\n    \"style\": {\n      \"color\": \"#657B83\"\n    }\n  }, \"}\"))))));\n}\n;\nMDXContent.isMDXComponent = true;","timeToRead":1,"fields":{"slug":"/posts/crack-fullscreen-watermark/"},"frontmatter":{"title":"记一次破解全屏水印的思路","description":null,"datePublished":"2021-12-27 00:00:00","dateModified":"2021-12-28 00:00:00","tags":["programming","crack"]}},"previous":null,"next":{"fields":{"slug":"/posts/sql-server-2008-r2-installation-and-configuration/"},"frontmatter":{"title":"SQL Server 2008 R2 安装与配置"}}},"pageContext":{"id":"46586264-f96f-59c2-b0d1-94d5d358925b","previousPostId":null,"nextPostId":"46328efa-412d-5f40-b00a-1c9c416d0e89"}},
    "staticQueryHashes": ["1790439409"]}