chompie1337 / SMBGhost_RCE_PoC

1.3k stars 349 forks source link

About "Failed to find low stub in physical memory!" problem? #15

Open BlueTearsY opened 3 years ago

BlueTearsY commented 3 years ago

前期调试,可以正常找到low stub,因为一些原因,我将处理器的内核数量,由2个改为1个,再次调试时,提示 Failed to find low stub in physical memory! In the early debugging, low stubs could be found normally. For some reasons, I changed the number of processor cores from 2 to 1. When debugging again, it Failed to find low stubs in physical memory!

经过测试: After testing:

内核数量为2个时,low stub 一般都是在固定的物理地址:13000 When the number of kernels is 2, low stubs are usually at a fixed physical address: 13000

内核数量改为1个,无法找到low stub,使用CheatEngine搜索物理内存也无法找到low stub The number of kernels is changed to 1. Low stubs cannot be found, nor can a search for physical memory using CheatEngine

如果你遇到了此问题,也可以将处理器的内核数量改为2个试试。。。 If you encounter this problem, you can also change the number of processor cores to 2 try...

另外,我还有个小问题,low stub是什么? And I have a little question, what is low stub?

在系统中发挥着什么样的作用呢? What role does it play in the system?

还请大佬给普及一下知识 Still ask big guy to popularize a knowledge