From a84e176bcaef353a08f66db112b42a07990f4de0 Mon Sep 17 00:00:00 2001 From: momo5502 Date: Fri, 20 Sep 2024 19:45:42 +0200 Subject: [PATCH] Patching demo --- src/sample/main.cpp | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/src/sample/main.cpp b/src/sample/main.cpp index e9abad40..818040dd 100644 --- a/src/sample/main.cpp +++ b/src/sample/main.cpp @@ -93,6 +93,20 @@ namespace win_emu.logger.print(color::blue, "Executing inline syscall: %s (0x%X) at 0x%llX\n", syscall_name.c_str(), syscall_id, rip); + + /*if (syscall_name == "NtQueryInformationProcess") + { + const auto info_class = win_emu.emu().reg(x64_register::rdx); + if (info_class == ProcessImageFileNameWin32) + { + const auto data = win_emu.emu().reg(x64_register::r8); + + emulator_allocator data_allocator{ win_emu.emu(), data, 0x100 }; + data_allocator.make_unicode_string(L"C:\\Users\\mauri\\source\\repos\\lul\\x64\\Release\\lul.exe"); + win_emu.emu().reg(x64_register::rax, STATUS_SUCCESS); + return instruction_hook_continuation::skip_instruction; + } + }*/ } return instruction_hook_continuation::run_instruction;