mMemory - WriteProcessMemory/vbaCopyBytes/RtlMoveMemory replacement [NOAPI!!!]

[BlackZeroX]

La bronca es COMO tienes declaradas las APIS... segun como las declares debes pasar los parametros de cierta manera...

para evitar estar poniendo mas y mas codigos...

unCrambleAPI

Sangriento Infierno Lunas!¡.

[Swellow]

PAGE_WRITECOPY is missing..

[BlackZeroX]

.
lammer

Dulces Lunas!¡.

[Swellow]

.
lammer

Dulces Lunas!¡.

Sorry it was my mistake I was using old mMemory...

[BUNNN]

@Karcrack Run-pe doesn't works if i compile with "Remove Array Bound Check" enabled.
Checked with inject to: this exe and default browser.

I can't manage to make run-pe to work with this, only call api by name.

[Karcrack]

I'm out of time atm... asap I'll run some tests... sorry
Looks you guys have the same problem: you're trying to write on non-writeable pages of memory... Anyway I'll do some test when I have free time...

[Swellow]

@Karcrack Run-pe doesn't works if i compile with "Remove Array Bound Check" enabled.
Checked with inject to: this exe and default browser.

I can't manage to make run-pe to work with this, only call api by name.

heh? Why not invoking RunPE's APIs with the CallAPI then?

[Swellow]

Someone on HH made cNtPel with 0 API's and 0 Types by modding this function do you think you would be able Karcrack?

[Unbr0ken]

Aguanta Karcrack, ¿sería como el uso de código inseguro en C#?, o ¿Punteros en C/C++?...

[BlackZeroX]

¿Punteros en C/C++?...

De alguna manera si... es muy parecido, pero muy limitado.

Dulces Lunas!¡.