-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathmain.cpp
More file actions
42 lines (34 loc) · 948 Bytes
/
main.cpp
File metadata and controls
42 lines (34 loc) · 948 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
#include "analysis.h"
int main()
{
PsHelper* helper = PsHelper::PsBuilder();
if (helper == nullptr) {
std::cout << "»ñÈ¡ÐéÄâ»ú½ø³Ìʧ°Ü\n";
return 0;
}
uint64_t result[2]{};
boolean success = helper->PsEnumProcess([](uint64_t pid, uint64_t cr3, const char* imagename, void* context) {
if (_stricmp(imagename, "test.exe") == 0) {
uint64_t* result = reinterpret_cast<uint64_t*>(context);
result[0] = pid;
result[1] = cr3;
return true;
}
return false;
}, result);
if (!success) {
return 0;
}
uint64_t module_address = helper->PsEnumModule(result[0], L"test.dll", nullptr);
if (module_address == 0) {
return 0;
}
uint64_t buffer = 0;
helper->PsReadMemory(module_address + 0x0, result[1], sizeof(buffer), &buffer);
printf("%lld\n", result);
system("pause");
helper->PsWriteMemory(module_address + 0x0, result[1], sizeof(buffer), &buffer);
system("pause");
delete helper; helper = nullptr;
return 0;
}