C ŒΎŒκŠΦ”:IntPtrAdd ƒTƒ“ƒvƒ‹ƒR[ƒh

ƒTƒ“ƒvƒ‹ƒR[ƒh‚πŒŸυ‚΅‚½Œ‹‰Κ‚Ε‚·B


TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
public static IntPtr IntPtrAdd(IntPtr a, int b).......
http://github.com/subTee/Troopers2016/blob/master/katz.cs


TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr y = NativeDeclarations.VirtualAlloc(IntPtrAdd(codebase, (int)pe.ImageSectionHeaders[i].VirtualAddress), pe.ImageSectionHeaders[i].SizeOfRawData, NativeDeclarations.MEM_COMMIT, NativeDeclarations.PAGE_EXECUTE_READWRITE);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
relocationTable = (IntPtrAdd(codebase, (int)pe.OptionalHeader32.BaseRelocationTable.VirtualAddress));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
relocationTable = (IntPtrAdd(codebase, (int)pe.OptionalHeader64.BaseRelocationTable.VirtualAddress));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr x = IntPtrAdd(relocationTable, sizeofNextBlock);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr dest = IntPtrAdd(codebase, (int)relocationEntry.VirtualAdress);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
patchAddr = IntPtrAdd(dest, fixup);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
offset = IntPtrAdd(relocationTable, sizeofNextBlock);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
nextEntry = IntPtrAdd(nextEntry, sizeofNextBlock);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
z = IntPtrAdd(codebase, (int)pe.ImageSectionHeaders[1].VirtualAddress);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
oa1 = IntPtrAdd(codebase, (int)pe.OptionalHeader32.ImportTable.VirtualAddress);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
oa2 = Marshal.ReadInt32(IntPtrAdd(oa1, 16));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
z = IntPtrAdd(codebase, (int)pe.ImageSectionHeaders[1].VirtualAddress);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
oa1 = IntPtrAdd(codebase, (int)pe.OptionalHeader64.ImportTable.VirtualAddress);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
oa2 = Marshal.ReadInt32(IntPtrAdd(oa1, 16));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr a1 = IntPtrAdd(codebase, (20 * j) + (int)pe.OptionalHeader32.ImportTable.VirtualAddress);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
int entryLength = Marshal.ReadInt32(IntPtrAdd(a1, 16));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr a2 = IntPtrAdd(codebase, (int)pe.ImageSectionHeaders[1].VirtualAddress + (entryLength - oa2));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr dllNamePTR = (IntPtr)(IntPtrAdd(codebase, Marshal.ReadInt32(IntPtrAdd(a1, 12))));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr dllFuncNamePTR = (IntPtrAdd(codebase, Marshal.ReadInt32(a2)));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
string DllFuncName = Marshal.PtrToStringAnsi(IntPtrAdd(dllFuncNamePTR, 2));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
a2 = IntPtrAdd(a2, 4);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
threadStart = IntPtrAdd(codebase, (int)pe.OptionalHeader32.AddressOfEntryPoint);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr a1 = IntPtrAdd(codebase, (20 * j) + (int)pe.OptionalHeader64.ImportTable.VirtualAddress);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
int entryLength = Marshal.ReadInt32(IntPtrAdd(a1, 16));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr a2 = IntPtrAdd(codebase, (int)pe.ImageSectionHeaders[1].VirtualAddress + (entryLength - oa2)); //Need just last part?.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr dllNamePTR = (IntPtr)(IntPtrAdd(codebase, Marshal.ReadInt32(IntPtrAdd(a1, 12))));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
IntPtr dllFuncNamePTR = (IntPtrAdd(codebase, Marshal.ReadInt32(a2)));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
string DllFuncName = Marshal.PtrToStringAnsi(IntPtrAdd(dllFuncNamePTR, 2));.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
a2 = IntPtrAdd(a2, 8);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
TITLE : Troopers2016/katz.cs at master ‘΅ subTee/Troopers2016 ‘΅ GitHub
threadStart = IntPtrAdd(codebase, (int)pe.OptionalHeader64.AddressOfEntryPoint);.......
http://github.com/subTee/Troopers2016/blob/master/katz.cs
Google‚ΕŒŸυ

https://www.google.co.jp/#q=IntPtrAdd