memory=VirtualAlloc(lpAddress, 3*v48, flAllocationType, 16*v19);


shellcode=(int (__stdcall *)(_DWORD, _DWORD))memory;


shellcode(&hkernel32, 0)

If function pointer, for each parameter (_DWORD, _DWORD) is

lpAddress = _DWORD = &hkernel32

flAllocationType = _DWORD=0

Is is right?


It means that memory is treated as a function pointer, of a function with stdcall calling conventions, that receives 2 arguments and returns int value.

  • Thanks and I've one question.
    – hoshia1234
    Aug 27 '21 at 5:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.