HookAddr = ImageBaseAddress + 0x5346CB;
BYTE ShellCode1[7] = { 0xB8 ,0x00 ,0x00 ,0xC8 ,0x42 ,0x90 ,0x90 };
DhWriteProcessMemory(hFile, pid, HookAddr, &ShellCode1, sizeof(ShellCode1), &dwRead);
HookAddr = ImageBaseAddress + 0x52B83D;//左右 + 43
BYTE ShellCode2[8] = { 0xF3 ,0x0F ,0x10 ,0x15 ,0xC5 ,0xD2 ,0xCC ,0x03 };
DhWriteProcessMemory(hFile, pid, HookAddr, &ShellCode2, sizeof(ShellCode2), &dwRead);
HookAddr = ImageBaseAddress + 0x51F4AE;
BYTE ShellCode3[8] = { 0xF3 ,0x0F ,0x10 ,0x05 ,0xC5 ,0xD2 ,0xCC ,0x03 };
DhWriteProcessMemory(hFile, pid, HookAddr, &ShellCode3, sizeof(ShellCode3), &dwRead);
HookAddr = ImageBaseAddress + 0x51FF00;
BYTE ShellCode4[6] = { 0xB8 ,0x00 ,0x00 ,0x00 ,0x00 ,0x90 };
DhWriteProcessMemory(hFile, pid, HookAddr, &ShellCode4, sizeof(ShellCode4), &dwRead);
HookAddr = ImageBaseAddress + 0x51FF00 + 8;
BYTE ShellCode5[6] = { 0xB8 ,0x00 ,0x00 ,0x00 ,0x00 ,0x90 };
DhWriteProcessMemory(hFile, pid, HookAddr, &ShellCode5, sizeof(ShellCode5), &dwRead);
HookAddr = ImageBaseAddress + 0x51FF00 + 17;
BYTE ShellCode6[6] = { 0xB8 ,0x00 ,0x00 ,0x00 ,0x00 ,0x90 };
DhWriteProcessMemory(hFile, pid, HookAddr, &ShellCode6, sizeof(ShellCode6), &dwRead); 怎么把这段代码改成e语言的啊
|