获得函数地址

摘自《Q版缓冲区溢出教程》

 

使用以下程序来获得Win系统核心函数地址，以便汇编调用Call (函数地址):

#include <windows.h>
#include <stdio.h>

typedef void (*MYPROC)(LPTSTR);

void main()
{
    HINSTANCE LibHandle;
    MYPROC ProcAdd;
    LibHandle = LoadLibrary("msvcrt");
    printf("msvcrt LibHandle = ", LibHandle);
    ProcAdd = (MYPROC)GetProcAddress(LibHandle, "system");
    printf("system = \\x%x\n", ProcAdd);
}