Aqui le dejo uno pequeño pero con Heap Shift, es del W580 R8BE001_Orange > W880 R8BA024
Código:;W880 SW-R8BA024 ;Automaticamente apaga Bluetooth en un tiempo especifico. ;(i) HeapShift (2018BC64-2018BC65) ;© jamesbond22 ;® Ploik ;((p) 05M4N include "x.inc" org 0x44EAAEFC ;0x44db8ae0 LDR R3, off_44DB8AE4 BX R3 off_44DB8AE4 dw loc_45C25760+1 ;-----------cuerpo del parche------------- org 0x45DA0CE0 ;0x45c25760 loc_45C25760: PUSH {R0,R4,LR} BL sub_45C25770 ADD R4, R0, 0 MOV R0, 0 STR R0, [SP] LDR R0, off_45C257A4 BX R0 sub_45C25770: PUSH {R0-R2,LR} LDR R0, dword_45C257B4 adr R1, loc_45C25780 ADD R1, 1 LDR R2, off_45C257A8 BLX R2 POP {R0-R2,PC} align 4 loc_45C25780: PUSH {R0-R5,LR} LDR R1, dword_45C257A0 LDRB R2, [R1] CMP R2, 1 BEQ loc_45C25790 MOV R0, 0 LDR R5, off_45C257B0 BLX R5 loc_45C25790: POP {R0-R5,PC} loc_45C25792: PUSH {R0,R4,LR} ADD R4, R0, 0 MOV R0, 0 STR R0, [SP] LDR R0, off_45C257A4 BX R0 align 4 dword_45C257A0 dw 0x2018BC64 ;0x201A4290 --> Heap Shift off_45C257A4 dw 0x44EAAF04+1 ;0x44DB8AE8+1 off_45C257A8 dw 0x453C3840+1 ;0x452E6F80+1 LDRH R1, [R4,0x16] ADD R11, R11 off_45C257B0 dw loc_45C25792+1 dword_45C257B4 dw 0x493E0





RESPONDER

Marcadores