冰楓論壇

標題: Tw Bnb v124 ICS 移動成鬼 [打印本頁]

---

作者: prt    時間: 2021-3-6 21:55
標題: Tw Bnb v124 ICS 移動成鬼

1. //Tw Bnb v124 ICS 移動成鬼
   
2. [Enable]
   
3. Alloc(Moveinto,64)
   
4. Label(Hook_2)
   
5. 
   
6. Moveinto:
   
7. cmp [esp+CC],0067AF5D
   
8. jne RtlAllocateHeap
   
9. mov [esp+CC],Hook_2
   
10. jmp RtlAllocateHeap
    
11. 
    
12. Hook_2:
    
13. test eax,eax
    
14. jne 0067AFAE
    
15. jmp 0067AF61
    
16. 
    
17. 
    
18. 
    
19. 00D37334:
    
20. DD Moveinto
    
21. 
    
22. [Disable]
    
23. 00D37334:
    
24. DD RtlAllocateHeap
    
25. DeAlloc(Moveinto)

複製代碼

---

歡迎光臨 冰楓論壇 (https://bingfong.com/)

Powered by 冰楓