- 注册时间
- 2011-10-8
- 最后登录
- 1970-1-1
该用户从未签到
|
- DWORD flOldProtect;
- BYTE *task=(BYTE*)0x789a60;
- ULONG taskjmpaddr=(ULONG)Sleeptask-0x789a60-5;
- VirtualProtect((LPVOID)task,4,PAGE_READWRITE,&flOldProtect);
- __asm
- {
- mov ebx,task
- mov byte ptr ds:[ebx],0xe9
- mov eax,taskjmpaddr
- mov DWORD ptr ds:[ebx+1],eax
- }
- VirtualProtect((LPVOID)task,4,flOldProtect,&flOldProtect);
- DWORD *calladdres=(DWORD*)0x00565730;
- DWORD *Sleepjmp=(DWORD*)0x789a65;
- DWORD TimeSleep=0;
- DWORD Taskaddres;
- DWORD sss;
- DWORD* dwbase=(DWORD*)(0xA34A2C);
- DWORD a[6]={0};
- DWORD *a1;
- CString hanhuaneirong;
- extern "C" _declspec(naked) void Sleeptask()
- {
-
- TimeSleep++;
- if (TimeSleep==100)
- {
- _asm
- {
- mov SaveEax,eax
- mov SaveEbx,ebx
- mov SaveEcx,ecx
- mov SaveEdx,edx
- mov SaveEsi,esi
- }
-
-
-
- sss=*(DWORD*)(*dwbase+0x1f0);
-
-
- a1=&a[0];
- hanhuaneirong="喊话内容 ";
-
- _asm
- {
- push a1
- push 0x80
- push hanhuaneirong
- push 0
- push 0x01
- mov ecx,sss
- mov edx,0x0065D440
- call edx
- }
- TimeSleep=0;
- _asm
- {
- mov eax,SaveEax
- mov ebx,SaveEbx
- mov ecx,SaveEcx
- mov edx,SaveEdx
- mov esi,SaveEsi
- }
- }
- __asm
- {
-
- CALL calladdres
- jmp Sleepjmp
- }
-
- }
复制代码 |
|