1
0

Experiments

This commit is contained in:
Benjamin Höglinger-Stelzer 2023-06-23 02:28:30 +02:00
parent 39b5903e35
commit 635b9fdfff

View File

@ -196,6 +196,7 @@ int wmain(int argc, wchar_t* argv[])
auto signature = "CPQCISS";
/*
const UCHAR payload[] = {
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
@ -205,6 +206,10 @@ int wmain(int argc, wchar_t* argv[])
0x00, 0x00, 0x84, 0x0B, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x80, 0x4A, 0x4F, 0x0D, 0x00, 0x00, 0x00, 0x00, 0x50, 0x8A, 0xC4, 0x03
};
*/
UCHAR payload[120];
ZeroMemory(payload, ARRAYSIZE(payload));
const size_t requestSize = sizeof(SRB_IO_CONTROL) + ARRAYSIZE(payload);
const PSRB_IO_CONTROL request = (PSRB_IO_CONTROL)malloc(requestSize);
@ -212,7 +217,7 @@ int wmain(int argc, wchar_t* argv[])
request->HeaderLength = sizeof(SRB_IO_CONTROL);
CopyMemory(request->Signature, signature, sizeof(request->Signature));
request->ControlCode = 4;
request->ControlCode = 2;
request->Timeout = 180;
request->Length = ARRAYSIZE(payload);