获取内核地址的函数,是否很简单。获取内核地址后,该干什么,你自己去想象吧!
function GetKernel32Address: Cardinal;
var
AAA : Integer;
BBB, CCC, DDD, EEE, FFF, GGG : Pointer;
begin
asm
MOV EAX,FS:[18H]
MOV AAA,EAX
end;
BBB := Pointer(Pointer(Integer(AAA) + $30)^);
CCC := Pointer(Pointer(Integer(BBB) + $0C)^);
DDD := Pointer(Pointer(Integer(CCC) + $0C)^);
EEE := Pointer(Pointer(Integer(DDD) + $00)^);
FFF := Pointer(Pointer(Integer(EEE) + $00)^);
GGG := Pointer(Pointer(Integer(FFF) + $18)^);
Result := Integer(GGG);
end;
Copyright © 2014 DelphiW.com 开发 源码 文档 技巧 All Rights Reserved
晋ICP备14006235号-8 晋公网安备 14108102000087号
执行时间: 0.10244989395142 seconds