-
-
[旧帖]
windbg 写入内存 Memory access error in 'ed b2dac000 0'
0.00雪花
-
发表于:
2013-11-29 15:08
4055
-
[旧帖] windbg 写入内存 Memory access error in 'ed b2dac000 0'
0.00雪花
最近在学习 【原创】现学现用之windbg的高级玩法外篇二:干掉QQProtect.sys 这个文章, 发现在
0: kd> .for(r @$t1=0;@$t1<200;r @$t1=@$t1+4) {ed eee33800+@$t1 0;}
这里
ed eee33800+@$t1 0 会 Memory access error in 'ed 0xb2dd4a04 0'
我用ed b2dd4a04 0
提示
^ Memory access error in 'ed 0xb2dd4a04 0'
下面是一些地址值
b2dac000 b2dd7900 QQProtect (no symbols)
SECTION HEADER #4
INIT name
CC6 virtual size
28A00 virtual address
D00 size of raw data
28A00 file pointer to raw data
0 file pointer to relocation table
0 file pointer to line numbers
0 number of relocations
0 number of line numbers
E2000020 flags
Code
Discardable
(no align specified)
Execute Read Write
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课