-
-
[旧帖]
[求助]用户模式下这段代码哪里有问题?
0.00雪花
-
发表于:
2009-4-16 20:15
2505
-
[旧帖] [求助]用户模式下这段代码哪里有问题?
0.00雪花
BYTE *pProcessMemory=new BYTE(0x10000);
DWORD BytesReturned;
BOOL result=DeviceIoControl(hDevice, IOCTL_GETPROCESS,NULL, 0, pProcessMemory, 0x10000,&BytesReturned, NULL);
), &output, sizeof(ULONG),&BytesReturned, NULL);
DWORD dw = GetLastError();
delete []pProcessMemory;
为什么我在驱动程序里进不了DeviceIoControl
而把BYTE *pProcessMemory=new BYTE(0x10000);
改成BYTE ProcessMemory[0x10000];
BOOL result=DeviceIoControl(hDevice, IOCTL_GETPROCESS,NULL, 0, &ProcessMemory, 0x10000,&BytesReturned, NULL);
就可以了,这是为什么呢?
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法