|
|
发表于 2020-3-30 18:57:49
|
显示全部楼层
5江湖币
- void hanhua(LPCVOID StrBase) {
- __asm {
- pushad
- mov ecx, dword ptr ds : [0x0389A348]
- push 0
- push StrBase
- mov ebx, 0x9C7DC0
- call ebx
- popad
- ret
- }
- }
- void start() {
- LPVOID ParamAddr = VirtualAllocEx(hprocess, 0, 0x400, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);
- char strp[] = "66666666666欢迎来到6666!!!";
- WriteProcessMemory(hprocess, ParamAddr, strp, 0x400, NULL);
- LPVOID CallBase = VirtualAllocEx(hprocess, 0, 0x1000, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);
- WriteProcessMemory(hprocess, CallBase, (LPCVOID)hanhua, 0x1000, 0);
- CreateRemoteThread(hprocess, NULL, 0, LPTHREAD_START_ROUTINE(CallBase), ParamAddr, 0, NULL);
- }
 ,小白一个学习一下
|
上一篇：求个最新版本的喊话call论坛版本的一键获取获取不到了下一篇：求大佬帮忙看下哈勃查毒结果
|
雷达卡
关闭卡
开启卡
千斤顶