获取内核地址的简单方法

获取内核地址的函数,是否很简单。获取内核地址后,该干什么,你自己去想象吧!

function GetKernel32Address: Cardinal;
var
  AAA                                             : Integer;
  BBB, CCC, DDD, EEE, FFF, GGG                    : Pointer;
begin
  asm
    MOV EAX,FS:[18H]
    MOV AAA,EAX
  end;
  BBB := Pointer(Pointer(Integer(AAA) + $30)^);
  CCC := Pointer(Pointer(Integer(BBB) + $0C)^);
  DDD := Pointer(Pointer(Integer(CCC) + $0C)^);
  EEE := Pointer(Pointer(Integer(DDD) + $00)^);
  FFF := Pointer(Pointer(Integer(EEE) + $00)^);
  GGG := Pointer(Pointer(Integer(FFF) + $18)^);
  Result := Integer(GGG);
end;

你可能感兴趣的:(c,function,Integer)