Aqui le dejo uno pequeño pero con Heap Shift, es del W580 R8BE001_Orange > W880 R8BA024
Código:
;W880 SW-R8BA024
;Automaticamente apaga Bluetooth en un tiempo especifico.
;(i) HeapShift (2018BC64-2018BC65)
;© jamesbond22
;® Ploik
;((p) 05M4N
include "x.inc"
org 0x44EAAEFC ;0x44db8ae0
LDR R3, off_44DB8AE4
BX R3
off_44DB8AE4 dw loc_45C25760+1
;-----------cuerpo del parche-------------
org 0x45DA0CE0 ;0x45c25760
loc_45C25760:
PUSH {R0,R4,LR}
BL sub_45C25770
ADD R4, R0, 0
MOV R0, 0
STR R0, [SP]
LDR R0, off_45C257A4
BX R0
sub_45C25770:
PUSH {R0-R2,LR}
LDR R0, dword_45C257B4
adr R1, loc_45C25780
ADD R1, 1
LDR R2, off_45C257A8
BLX R2
POP {R0-R2,PC}
align 4
loc_45C25780:
PUSH {R0-R5,LR}
LDR R1, dword_45C257A0
LDRB R2, [R1]
CMP R2, 1
BEQ loc_45C25790
MOV R0, 0
LDR R5, off_45C257B0
BLX R5
loc_45C25790:
POP {R0-R5,PC}
loc_45C25792:
PUSH {R0,R4,LR}
ADD R4, R0, 0
MOV R0, 0
STR R0, [SP]
LDR R0, off_45C257A4
BX R0
align 4
dword_45C257A0 dw 0x2018BC64 ;0x201A4290 --> Heap Shift
off_45C257A4 dw 0x44EAAF04+1 ;0x44DB8AE8+1
off_45C257A8 dw 0x453C3840+1 ;0x452E6F80+1
LDRH R1, [R4,0x16]
ADD R11, R11
off_45C257B0 dw loc_45C25792+1
dword_45C257B4 dw 0x493E0
Marcadores