获取内核地址的函数,是否很简单。获取内核地址后,该干什么,你自己去想象吧!
function GetKernel32Address: Cardinal;
var
AAA : Integer;
BBB, CCC, DDD, EEE, FFF, GGG : Pointer;
begin
asm
MOV EAX,FS:[18H]
MOV AAA,EAX
end;
BBB := Pointer(Pointer(Integer(AAA) + $30)^);
CCC := Pointer(Pointer(Integer(BBB) + $0C)^);
DDD := Pointer(Pointer(Integer(CCC) + $0C)^);
EEE := Pointer(Pointer(Integer(DDD) + $00)^);
FFF := Pointer(Pointer(Integer(EEE) + $00)^);
GGG := Pointer(Pointer(Integer(FFF) + $18)^);
Result := Integer(GGG);
end;