Closed sinmygit closed 7 years ago
there's some problem when using x86 shellcode on win8.1 X64,maybe is the problem in dealing with the fun "GetProcAddressWithHash" ,the shellcode move the param to ecx, not using "push" I guess.
it is the shellcode length cause the problem
there's some problem when using x86 shellcode on win8.1 X64,maybe is the problem in dealing with the fun "GetProcAddressWithHash" ,the shellcode move the param to ecx, not using "push" I guess.