31-01-2021, 02:03 PM
(آخر تعديل لهذه المشاركة : 01-02-2021, 11:29 AM بواسطة kesmezar.
تعديل السبب: attachment deleted
)
->لقد غيرتها إلى 32 بت
Your code does not work as such. I ran it with some change
Your code does not work as such. I ran it with some change
.386
.model flat,stdcall
option casemap:none
ifndef _Win64;
include masm32rt.inc;
else;
include masm64rt.inc;
endif;
.data
filename db "test.exe", 0
targetaddress dd 004012D8h
values byte 74h ;dup(90h,90h,90h,90h)
sinfo STARTUPINFO<>
pinfo PROCESS_INFORMATION<>
.code
start: ;->64bit not use
loader proc public
invoke CreateProcess, addr filename, NULL, 0, 0, 0, CREATE_SUSPENDED, 0, 0, addr sinfo, addr pinfo
invoke WriteProcessMemory, pinfo.hProcess, targetaddress, addr values, 1,0
invoke ResumeThread, pinfo.hThread
invoke ExitProcess,0
loader endp
end start ;->64bit not use
end ;->for 64bit