rip1s / CVE-2018-8120

CVE-2018-8120 Windows LPE exploit

GNU General Public License v3.0

494 stars 190 forks source link

What is the use of "0x4800200"？ #1

Closed ne1llee closed 6 years ago

ne1llee commented 6 years ago

PVOID *p = (PVOID *)&ime;
p[0] = (PVOID)wpv;
p[1] = (PVOID)wpv;
DWORD *pp = (DWORD *)&p[2];
pp[0] = 0x180;  。
pp[1] = 0xabcd;
pp[2] = 6;
pp[3] = 0x10000;

ifndef _WIN64

pp[5] = 0x4800200;

else

pp[6] = 0x4800200;