函数如下: proc GetNtOsBaseAddr mov eax,[fs:34h] add eax,18h mov eax,[eax] mov eax,[eax] mov eax,[eax+18h] ret endp