Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- int _tmain(int argc, _TCHAR* argv[])
- {
- DWORD Result;
- CShellEnvironment* pEnv = new CShellEnvironment(9304);
- if (pEnv->CreateEnvironment())
- {
- DWORD* pBuffer = (DWORD*)pEnv->CreateResource(sizeof(DWORD));
- CShellCode* pShell = new CShellCode(InvokeBotcheck, 36, TRUE);
- pShell->CreatePatch(4, (PBYTE)pBuffer, sizeof(DWORD));
- pShell->CreatePatch(10, (PBYTE)0, sizeof(DWORD));
- pShell->CreatePatch(16, (PBYTE)0, sizeof(DWORD));
- pShell->CreatePatch(22, (PBYTE)37560401, sizeof(DWORD));
- LPVOID remoteShell = pEnv->CreateResourceShell(pShell);
- pEnv->ExecuteRemoteFunc(remoteShell, NULL);
- pEnv->CopyFromResource(&Result, pBuffer, sizeof(DWORD));
- pEnv->FreeResource(pShell);
- pEnv->FreeResource(pBuffer);
- printf("Result obtained: %d", Result);
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement