GetKernelBase proc
assume fs:nothing
mov eax, fs:[18h]
mov eax, [eax+30h]
mov eax, [eax+0ch]
mov eax, [eax+0ch]
mov eax, [eax]
mov eax, [eax]
assume fs:nothing
mov eax, fs:[18h]
mov eax, [eax+30h]
mov eax, [eax+0ch]
mov eax, [eax+0ch]
mov eax, [eax]
mov eax, [eax]
mov eax, [eax+18h]
ret
GetKernelBase proc
扫一扫
1190
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
