Rewrite 32->64 CreateThread (parse own 64ntdll + shellcode in simple_x64)

This commit is contained in:
Clement Rouault
2015-09-16 10:13:18 +02:00
parent 59a0c933f9
commit 7532172813
3 changed files with 97 additions and 171 deletions
+1 -1
View File
@@ -292,7 +292,7 @@ def create_function(code, types):
# Return First argument for 32 bits code
raw_code = x86.MultipleInstr()
raw_code += x86.Mov('EAX', x86.create_displacement(base='ESP', disp=4))
raw_code += x86.Mov('EAX', x86.mem('[ESP + 4]'))
raw_code += x86.Ret()
get_callback_address_32 = create_function(raw_code.get_code(), [ctypes.c_void_p])