getprivileges.asm

来自「一个十六进制编辑器源代码,cool!」· 汇编 代码 · 共 20 行

.CODE
;-----------------------------------------------------------------
;取得NT中的调试权限
_GetPrivileges proc
	local @tkp:TOKEN_PRIVILEGES
	local hToken
	pushad
	call GetCurrentProcess
	mov ebx,eax
	xor edi,edi
	invoke OpenProcessToken,ebx,TOKEN_ADJUST_PRIVILEGES or TOKEN_QUERY, addr hToken
	invoke LookupPrivilegeValue,edi, ctext('SeDebugPrivilege'), addr @tkp.Privileges[0].Luid
	mov @tkp.PrivilegeCount,1
	mov @tkp.Privileges[0].Attributes,SE_PRIVILEGE_ENABLED
	invoke AdjustTokenPrivileges,hToken, edi, addr @tkp, edi, edi, edi
	popad
	ret
_GetPrivileges endp