远控1x

wowocock

QVM360 发表于 2024-9-1 22:09
为什么不是wwwab.dll

@wwwab

int __stdcall sub_30001573(int a1, int a2, int a3, int a4)
{
  HMODULE LibraryW; // edi
  FARPROC FMain; // ebx
  FARPROC wdGetApplicationObject; // eax

  LibraryW = LoadLibraryW(L"wwlib.dll");
  if ( LibraryW || (LibraryW = (HMODULE)sub_30001968(L"{0638C49D-BB8B-4CD1-B191-051E8F325736}")) != 0 )
  {
    FMain = GetProcAddress(LibraryW, "FMain");
    wdCommandDispatch_0 = (int)GetProcAddress(LibraryW, "wdCommandDispatch");
    wdGetApplicationObject = GetProcAddress(LibraryW, "wdGetApplicationObject");
    dword_3000300C = (int)wdGetApplicationObject;
    if ( FMain && wdCommandDispatch_0 && wdGetApplicationObject )
    {
      ((void (__stdcall *)(int, int, int, int))FMain)(a1, a2, a3, a4);
      FreeLibrary(LibraryW);
      return 0;
    }
    else
    {
      return 1;
    }
  }
  else
  {
    GetLastError();
    return 1;
  }
}

1073328164

迈克菲扫描 miss

星神不灭

eis右键扫描miss

wwwab

QVM360 发表于 2024-9-1 22:09
为什么不是wwwab.dll

@wwwab

劫持wwlib.dll海莲花也用过啊，https://www.freebuf.com/sectool/201940.html

QVM360

wwwab 发表于 2024-9-2 18:48
劫持wwlib.dll海莲花也用过啊，https://www.freebuf.com/sectool/201940.html

https://bbs.kafan.cn/thread-2273102-2-1.html

btbtg