Quantcast
Channel: 看雪安全论坛
Viewing all articles
Browse latest Browse all 9556

【求助】关于ReadVirtualMemory c++内核

$
0
0
0x805882FE B89C7E05A3 mov eax, A3057E9C ////
0x80588303 FFE0 jmp eax
0x80588305 E899BBF5FF call 804E3EA3


请教各位大哥 C++如何
NtReadVirtualMemory_Addr =GetSSDTFunctionAddr(186);


得到805882FE


__ASM
{
mov eax,[NtReadVirtualMemory]
mov readMemory,eax
}

这个ASM汇编貌似不能读出805882FE 的EAX值,有没大神会写出获取出805882FE 的EAX值及80588305 CALL的地址?
简单点来说就是获取A3057E9C, 804E3EA3

求源码

Viewing all articles
Browse latest Browse all 9556

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>