-
-
[求助]gs:[188h] 指向的是什么结构
-
发表于:
2016-10-24 19:20
6162
-
求大件指教下
1: kd> u psgetcurrentprocessid
nt!PsGetCurrentProcessId:
fffff800`01aa7490 65488b042588010000 mov rax,qword ptr gs:[188h]
fffff800`01aa7499 488b80b8030000 mov rax,qword ptr [rax+3B8h]
fffff800`01aa74a0 c3 ret
fffff800`01aa74a1 90 nop
fffff800`01aa74a2 90 nop
fffff800`01aa74a3 90 nop
fffff800`01aa74a4 90 nop
fffff800`01aa74a5 90 nop
1: kd> u psgetcurrentprocess
nt!PsGetCurrentProcess:
fffff800`01a96280 65488b042588010000 mov rax,qword ptr gs:[188h]
fffff800`01a96289 488b4070 mov rax,qword ptr [rax+70h]
fffff800`01a9628d c3 ret
fffff800`01a9628e 90 nop
fffff800`01a9628f 90 nop
fffff800`01a96290 90 nop
fffff800`01a96291 90 nop
fffff800`01a96292 90 nop
[课程]Android-CTF解题方法汇总!