NtProtectVirtualMemory Function

If you arn't a driver, you usually can't use this without calling it yourself.
I was doing this for an experiment, too bad I don't do maplestory hacking

Here is the source to the two functions, just incase you need them some day.

Kod:

dword pvFindFunc(void)
{
    dword ModuleBase, pNtProtectVirtualMemory;

    ModuleBase = (dword)LoadLibraryA("ntdll.dll");

    printf("ntdll.dll -> %08x\n", ModuleBase);

    pNtProtectVirtualMemory = (dword)GetProcAddress((HMODULE)ModuleBase, "NtProtectVirtualMemory");

    printf("pNtProtectVirtualMemory -> %08x\n", pNtProtectVirtualMemory);
   
    return pNtProtectVirtualMemory;
}

void* proto_NtProtectVirtualMemory( HANDLE  ProcessHandle, PVOID  *BaseAddress, PULONG  ProtectSize, ULONG  NewProtect, PULONG  OldProtect)
{
    dword pTmp;
    _asm{
        call pvFindFunc
        mov pTmp, eax
        xor eax, eax
        push OldProtect
        push NewProtect
        push ProtectSize
        push BaseAddress
        push ProcessHandle
        mov eax, pTmp ;Any General Purpose Register Will Do The Job.
        call eax
        add esp, 20
        xor pTmp, pTmp
        mov pTmp, eax
    }
    return pTmp;
}

You could also use typedef, but that doesn't use any assembly, and I love assembly =3.

For you who don't know what this is, it should allow you to get rights to near any memory, bring you into ring 2, apposed to VirtualProtect's ring 3.

Thanks, CarbonCopy.