admin/strivexjun-MemoryModulePP
1
0
Fork 0
mirror of https://github.com/strivexjun/MemoryModulePP synced 2026-06-08 17:37:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed WIN10 10240

Browse Source
This commit is contained in:
Xjun
2018-02-10 00:00:20 +08:00
parent d94ba2e0a2
commit 9d06832241
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MemoryModulePP.c
+3 -3
View File
@@ -64,7 +64,7 @@ int __fastcall RtlInsertInvertedFunctionTable(PVOID BaseAddress, ULONG uImageSiz
WIN10 x86 and x64 (Build 10240)
int __fastcall RtlInsertInvertedFunctionTable(PVOID BaseAddress, ULONG uImageSize)
8B 85 18 FF FF FF 8B 70 50 8B D6 8B 8D 34 FF FF FF E8
8B 85 ?? FF FF FF 8B 70 50 8B D6 8B 8D ?? FF FF FF E8
.text:4B31E0CB 8B 85 18 FF FF FF mov eax, [ebp+var_E8]
.text:4B31E0D1 8B 70 50 mov esi, [eax+50h]
@@ -674,8 +674,8 @@ InitFindExceptPrivateFunc()
0xD0, 0x89, 0x45, 0xF0, 0xE8
};
unsigned char ida_chars3[] = {
0x8B, 0x85, 0x18, 0xFF, 0xFF, 0xFF, 0x8B, 0x70, 0x50,
0x8B, 0xD6, 0x8B, 0x8D, 0x34, 0xFF, 0xFF, 0xFF, 0xE8
0x8B, 0x85, 0x90, 0xFF, 0xFF, 0xFF, 0x8B, 0x70, 0x50,
0x8B, 0xD6, 0x8B, 0x8D, 0x90, 0xFF, 0xFF, 0xFF, 0xE8
};
if ((lResult = FindPattern(pNtdllCode, ida_chars1, uNtdllCodeSize, sizeof(ida_chars1))) != -1)
{