本帖最后由 fancylf 于 2015-3-9 23:01 编辑

看了，

d90K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3@1#2K9r3!0E0k6g2)9J5k6h3y4G2L8g2)9J5c8X3u0T1M7#2)9J5c8X3k6G2M7Y4g2E0i4K6u0W2M7r3S2H3i4K6y4r3L8h3!0V1i4K6y4p5N6X3W2W2N6%4c8Z5M7X3g2S2k6q4)9J5y4Y4c8A6k6q4)9K6c8o6M7$3z5e0c8Q4x3U0k6W2P5s2c8J5j5g2)9K6c8q4)9J5y4X3S2A6k6$3S2D9K9h3N6Z5N6q4)9K6c8q4)9J5y4f1f1$3i4K6t1#2b7U0q4Q4x3U0f1^5x3W2)9J5y4f1f1#2i4K6t1#2z5p5q4Q4x3U0g2m8z5g2)9J5y4f1f1$3i4K6t1#2z5p5u0Q4x3U0g2m8y4W2)9J5y4f1f1$3i4K6t1#2z5o6S2Q4x3U0g2m8b7f1c8x3e0q4)9J5y4f1f1#2i4K6t1#2z5p5q4Q4x3U0g2m8x3q4)9J5y4f1f1^5i4K6t1#2b7V1c8Q4x3U0g2n7c8q4)9J5y4f1f1&6i4K6t1#2z5e0N6Q4x3U0g2m8c8g2)9J5y4f1f1&6i4K6t1#2b7e0u0Q4x3U0f1&6z5q4)9J5y4Y4m8S2k6$3g2Q4x3@1b7I4

后，一直卡在NtProtectVirtualMemory 处，错误码是C0000018
楼主也说了
“NtProtectVirtualMemory调用失败是因为传入地址是内核地址，还需要另外申请R3内存做转换”
但是不太理解是什么意思，该如何转换呢，请各路大神指点下，万分感谢

NTSTATUS
  NTAPI
  NtProtectVirtualMemory(IN HANDLE ProcessHandle,
                          IN OUT PVOID *UnsafeBaseAddress,
                          IN OUT SIZE_T *UnsafeNumberOfBytesToProtect,
                          IN ULONG NewAccessProtection,
                          OUT PULONG UnsafeOldAccessProtection)；

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课