XFWPE封包工具分享 按说明即可使用 有需要的拿

139218766

支持楼主，感谢楼主的分享，好贴必须学习！

HQ助手

kangning521 发表于 2021-9-30 03:15
__int64 __fastcall sub_140001C10(__int64 a1, unsigned __int16 *a2)
{
  if ( !a1 || !a2 )

兄弟你发的啥

kangning521

__int64 __fastcall sub_140001C10(__int64 a1, unsigned __int16 *a2)
{
  if ( !a1 || !a2 )
    RtlAssert(
      "result != NULL && source != NULL",
      "c:\\users\\nice\\desktop\\bx\\bufferloaddriver\\bufferloaddriver\\bufferload.c",
      0xE4u,
      0i64);
  if ( !a1 || !a2 || !*((_QWORD *)a2 + 1) )
    return 3221225485i64;
  if ( *a2 )
  {
    *(_QWORD *)(a1 + 8) = ExAllocatePoolWithTag(PagedPool, a2[1], 0x78787878u);
    *(_WORD *)a1 = *a2;
    *(_WORD *)(a1 + 2) = a2[1];
    qmemcpy(*(void **)(a1 + 8), *((const void **)a2 + 1), *a2);
  }
  else
  {
    *(_WORD *)(a1 + 2) = 0;
    *(_WORD *)a1 = 0;