Kernel32.dll基地址
来源：互联网 发布：问道登录器源码 编辑：程序博客网 时间：2024/04/28 16:01
PUSH ESI;XOR ECX,ECX;MOV ESI,DWORD PTR FS:[ECX+30];MOV ESI,DWORD PTR [ESI+C];MOV ESI,DWORD PTR [ESI+1C];LABEL1: MOV eax,DWORD PTR [ESI+8];MOV EDI,DWORD PTR [ESI+20];MOV ESI,DWORD PTR [ESI];CMP WORD PTR [EDI+18],CX;JNZ LABEL1;POP ESI;
DWORD WINAPI GetKrnlBase(void){__asm{push offset LBLEX;push dword ptr fs:[0];mov dword ptr fs:[0], esp;int 3h;int 3h;LBLEX:mov esp, dword ptr ss:[esp+8];pop dword ptr fs:[0];add esp, 4;PUSH ESI;XOR ECX,ECX;MOV ESI,DWORD PTR FS:[ECX+30h];MOV ESI,DWORD PTR [ESI+0Ch];MOV ESI,DWORD PTR [ESI+1Ch];LABEL1:MOV eax,DWORD PTR [ESI+8h];MOV EDI,DWORD PTR [ESI+20h];MOV ESI,DWORD PTR [ESI];CMP WORD PTR [EDI+18h],CX;JNZ LABEL1;POP ESI;}}
