admin/loland-inlineExecute
1
0
Fork 0
mirror of https://github.com/loland/inlineExecute synced 2026-06-21 13:56:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Subscriber Bit Patching signature update

Browse Source 
Updated the signature to be compatible with older versions of clr.dll. Integrated into the BOF
This commit is contained in:
loland
2025-12-04 22:49:18 +08:00
parent 14740195e0
commit 1780e0ac41
4 changed files with 27 additions and 114 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Code Snippets/SubscriberBitPatch.c
+1 -1
View File
@@ -70,7 +70,7 @@ int* findDotNETRuntimeEnableBits(HMODULE clrBase) {
for (int i = 0; i < clrSize; i++) {
unsigned char* addr = (unsigned char*)clrBase + i;
// matches "test cs:Microsoft_Windows_DotNETRuntimeEnableBits, 80000000h"
// matches "test cs:Microsoft_Windows_DotNETRuntimeEnableBits, 80000000h/40000000h"
if (addr[0] != 0xf7 || addr[1] != 0x5) {
continue;
}