admin/zimnyaa-PhaseDive
1
0
Fork 0
mirror of https://github.com/zimnyaa/PhaseDive synced 2026-06-08 18:36:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update PhaseDive.c

Browse Source
This commit is contained in:
zimnyaa
2022-10-13 19:14:14 +03:00
parent 4a0871c6b8
commit 36c9f0aa2f
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Src/PhaseDive.c
+1 -2
View File
@@ -53,12 +53,11 @@ VOID EkkoObf( DWORD SleepTime )
PVOID ntdll_callzw = (PVOID)0x00007FFB300FDDD0;
printf("(ntdll.dll) JMP RAX -> %p\n", ntdll_jmprax);
printf("(ntdll.dll) CALL ZwContinue -> %p\n", ntdll_callzw);
printf("(ntdll.dll) CALL ZwContinue -> %p FIND YOUR OWN WITH x64dbg\n", ntdll_callzw);
hEvent = CreateEventW( 0, 0, 0, 0 );
hTimerQueue = CreateTimerQueue();
NtContinue = GetProcAddress( GetModuleHandleA( "Ntdll" ), "NtContinue" );
SysFunc032 = GetProcAddress( LoadLibraryA( "Advapi32" ), "SystemFunction032" );
ImageBase = GetModuleHandleA( NULL );