-
-
[讨论]内核下读内存数据的奇怪问题
-
发表于:
2013-7-20 23:02
3798
-
for(; pSrcAddr <= i; pSrcAddr++){
if((*pSrcAddr == 0xFF) &&(*(pSrcAddr+1) == 0x75) &&
(*(pSrcAddr+2) == 0xC8) &&(*(pSrcAddr+3) == 0xFF) &&
(*(pSrcAddr+4) == 0x75) &&(*(pSrcAddr+5) == 0xDC))
{
return (PULONG)pSrcAddr;
}
DbgPrint("搜索到%x; 0:%1x, +1:%1x, +2:%1x, +3:%1x, +4:%1x, +5:%1x\n",pSrcAddr,*pSrcAddr,*(pSrcAddr+1),*(pSrcAddr+2),*(pSrcAddr+3),*(pSrcAddr+4),*(pSrcAddr+5));
}
搜索到805c2600;0:ffffffff,+1:75,+2:ffffffc8,+3:ffffffff,+4:75,+5:ffffffdc
同样的读取,怎么有的读出来是4字节,有的是1字节,哪里出问题了呢?
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课