![]() |
|
#12
|
|||
|
|||
|
WinXP: ntoskrnl.exe!PsGetCurrentProcess
Code:
mov eax, fs:[124] mov eax, [eax+44] ret Code:
mov eax, fs:[124] mov eax, [eax+38] ret |
| Thread Tools | |
| Display Modes | |
|
|