mirror of
https://github.com/d35ha/PE2Shellcode
synced 2026-06-08 13:42:58 +00:00
Mustafa Mahmoud
44 lines
1.7 KiB
PHP
44 lines
1.7 KiB
PHP
|
|
TEB_PPEB_OFFSET equ 30h
|
|
PEB_PLDR_OFFSET equ 0ch
|
|
LDR_PIN_ORDER_MOD_LIST_OFFSET equ 0ch
|
|
LDR_MODULE_BASE_OFFSET equ 18h
|
|
IMAGE_DOS_HEADER_LFANEW_OFFSET equ 3ch
|
|
|
|
IMAGE_NT_HEADER_ENTRY_EXPORT_OFFSET equ 78h
|
|
IMAGE_NT_HEADER_ENTRY_IMPORT_OFFSET equ 80h
|
|
IMAGE_NT_HEADER_ENTRY_RELOCS_OFFSET equ 0a0h
|
|
|
|
EXPORT_TABLE_ADDR_OF_NAMES_OFFSET equ 20h
|
|
EXPORT_TABLE_ADDR_OF_ORDINALS_OFFSET equ 24h
|
|
EXPORT_TABLE_ADDR_OF_FUNCTIONS_OFFSET equ 1ch
|
|
|
|
STRING_OF_GETP equ 50746547h
|
|
STRING_OF_ROCA equ 41636f72h
|
|
STRING_OF_DDRE equ 65726464h
|
|
|
|
MEM_COMMIT equ 1000h
|
|
MEM_RESERVE equ 2000h
|
|
MEM_RELEASE equ 8000h
|
|
|
|
PAGE_EXECUTE_READWRITE equ 40h
|
|
|
|
IMAGE_NT_HEADER_SIZE_OF_IMAGE_OFFSET equ 50h
|
|
IMAGE_NT_HEADER_BASE_OF_IMAGE_OFFSET equ 34h
|
|
IMAGE_SECTION_HEADER_VIRTUAL_SIZE_OFFSET equ 8h
|
|
IMAGE_SECTION_HEADER_VIRTUAL_ADDR_OFFSET equ 0ch
|
|
IMAGE_NT_HEADER_NUMBER_OF_SECTIONS_OFFSET equ 6h
|
|
IMAGE_NT_HEADER_ADDR_OF_ENTRY_POINT_OFFSET equ 28h
|
|
IMAGE_SECTION_HEADER_POINTER_TO_RAW_DATA_OFFSET equ 14h
|
|
IMAGE_SECTION_HEADER_SIZE_OF_RAW_DATA_OFFSET equ 10h
|
|
SIZE_OF_IMAGE_IMPORT_DESCRIPTOR equ 14h
|
|
|
|
SIZE_OF_IMAGE_THUNK_DATA equ 4h
|
|
SIZE_OF_IMAGE_NT_HEADER equ 0F8h
|
|
SIZE_OF_IMAGE_SECTION_HEADER equ 28h
|
|
|
|
IMAGE_IMPORT_DESCRIPTOR_TIME_STAMP_OFFSET equ 4h
|
|
IMAGE_IMPORT_DESCRIPTOR_NAME_OFFSET equ 0ch
|
|
IMAGE_IMPORT_DESCRIPTOR_FIRST_THUNK_OFFSET equ 10h
|
|
|