Einzelnen Beitrag anzeigen

Kas Ob.

Registriert seit: 3. Sep 2023
473 Beiträge
 
#6

AW: Windows Version inkl. Win 11 ermitteln

  Alt Gestern, 15:04
Feste Speicheradresse?

Zum Glück ist ASLR in aktuellen Delphis nicht aktiv.
Halt nee, ist es.
That address belong to a magic read-only fixed page, it is there since the dawn of Windows 32bit, and it is not going anywhere anytime, also documented my Microsoft, the thing is the documentation went from mainstream to more less encouraged to be used, but it was heavily documented in DDK and not only that it was recommended to be relied on for timing instead of GetTickCount for games and more specially for low level drivers.
https://learn.microsoft.com/en-us/wi...er_shared_data
https://learn.microsoft.com/en-us/wi...gercmds/-kuser

In case you afraid of ASLR, which doesn't have a connection to non executable loading address as it is read-only page for general information, then have a look at this
https://msrc.microsoft.com/blog/2022...re-on-windows/
meaning for User space the address and that page will stay the same,
and for Driver/Kernel space where it is read+write it might be change address on boot when KASLR is enabled.
Kas
  Mit Zitat antworten Zitat