node-windows-x64/examples/target.md

node windows x64

```js
const t = new nw.Target(5384);
if (t.pid && t.hProcess) {
  console.log(t.name);
  console.log(t.pid);
  console.log(t.hProcess);
}


const t = nw.createTargetWithPID(5384);
if (t.pid && t.hProcess) {
  console.log(t.name);
  console.log(t.pid);
  console.log(t.hProcess);
}


const t = nw.createTargetWithName("Tutorial-i386.exe");
if (t.pid && t.hProcess) {
  console.log(t.name);
  console.log(t.pid);
  console.log(t.hProcess);
}
```

## setNop
```js
/**
define(address,"Tutorial-i386.exe"+2578F)
define(bytes,29 83 AC 04 00 00)

[ENABLE]
address:
  db 90 90 90 90 90 90

[DISABLE]
address:
  db bytes
 
  */

const t = nw.createTargetWithName("Tutorial-i386.exe");
if (t.pid && t.hProcess) {
  const address = nw.getAddress(`"Tutorial-i386.exe"+2578F`, t.hProcess);
  const handle = t.setNop(address, 6);
  console.log(handle);

  if (handle.bSuccess) {
    handle.enable();

    setTimeout(() => {
      handle.disable();

      // 如果不在使用handle，那么一定要调用delete函数
      handle.delete();
    }, 1000 * 10);
  }
}
```

## setHook
```js
/**
define(address,"Tutorial-i386.exe"+2578F)
define(bytes,29 83 AC 04 00 00)

[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)

label(return)

newmem:
  sub [ebx+000004AC],0 // 83 AB AC040000 00
  jmp return

address:
  jmp newmem
  nop
return:

[DISABLE]

address:
  db bytes

dealloc(newmem)
  */

const t = nw.createTargetWithName("Tutorial-i386.exe");
if (t.pid && t.hProcess) {
  const address = nw.getAddress(`"Tutorial-i386.exe"+2578F`, t.hProcess);
  
  const hookBytes = nw.asmBytes(`sub DWORD [ebx+0x4AC],0`, false);
  const handle = t.setHook(address, 6, hookBytes);

  // or
  // const handle = t.setHook(address, 6, `sub DWORD [ebx+0x4AC],0`);

  console.log(handle);

  if (handle.bSuccess) {
    handle.enable();

    setTimeout(() => {
      handle.disable();

      // 如果不在使用handle，那么一定要调用delete函数
      handle.delete();
    }, 1000 * 10);
  }
}
```

## moduleScan
```js
const t = nw.createTargetWithName("Tutorial-i386.exe");
if (t.pid && t.hProcess) {
  const addrs = t.moduleScan("29 83 AC 04 00 00");
  console.log(addrs); // [ 4347791 ]

  t.moduleScan("? 83 AC 04 00 00"); // [ 4347791, 4347805, 4347895, 4347913, 4348372 ]
}
```

```js
const t = nw.createTargetWithName("Tutorial-i386.exe");
if (t.pid && t.hProcess) {
  const addrs = t.moduleScan("29 83 AC 04 00 00");
  const handle = t.setNop(addrs[0], 6);
  console.log(handle);

  if (handle.bSuccess) {
    handle.enable();

    setTimeout(() => {
      handle.disable();
      handle.delete();
    }, 1000 * 3);
  }
}
```