Win 10 not load in VirtualAlloc mem !

flat assembler
Message board for the users of flat assembler.

Index > Windows > Win 10 not load in VirtualAlloc mem !

Author

Thread

Roman

Joined: 21 Apr 2012
Posts: 1144

Roman

I am confused !
This work fine on Win 7. But crash on Win 10

Code:

invoke VirtualAlloc,0,1000,MEM_COMMIT,PAGE_READWRITE
mov dword [rax],10   ;this crash on Win 10

I check in rax i get address not NULL.

19 May 2021, 18:22

revolution
When all else fails, read the source

Joined: 24 Aug 2004
Posts: 18622
Location: In your JS exploiting you and your system

revolution

You can use GetLastError to see why it failed, but only if it return null.

Otherwise there is no reason it won't work. You probably have something else in there that you omitted to post which is causing the problem.

19 May 2021, 18:29

Roman

Joined: 21 Apr 2012
Posts: 1144

Roman

My mistake.
I found.
This work correct.
invoke VirtualAlloc,0,1000,MEM_COMMIT,PAGE_READWRITE

19 May 2021, 18:37

DimonSoft

Joined: 03 Mar 2010
Posts: 1027
Location: Belarus

DimonSoft

Roman wrote:

Code:

invoke VirtualAlloc,0,1000,MEM_COMMIT,PAGE_READWRITE
mov dword [rax],10   ;this crash on Win 10

Roman wrote:

invoke VirtualAlloc,0,1000,MEM_COMMIT,PAGE_READWRITE

Am I the only one who doesn’t see any difference between two versions, except for the line that exposes the (presumably bad) value in rax?

19 May 2021, 19:22

AsmGuru62

Joined: 28 Jan 2004
Posts: 1450
Location: Toronto, Canada

AsmGuru62

I also saw that this is same code.
Also, MSDN recommends to use the combination of flags (MEM_COMMIT or MEM_RESERVE) to access the memory right away.

25 May 2021, 20:57

< Last Thread | Next Thread >

Forum Rules:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum