(Hex Rays and IDA + ODBG aka Ollydbg 110) use JBEnt.dll or JBEnt_patched.dll
Same effect in jackbot (anyway thanks for good stuff man!)
code in JBEnt.dll or JBEnt_patched.dll
Code:74557CE9 |. 6A 00 PUSH 0 ; /pThreadId = NULL 74557CEB |. 6A 00 PUSH 0 ; |CreationFlags = 0 74557CED |. 6A 00 PUSH 0 ; |pThreadParm = NULL 74557CEF |. 68 10B15574 PUSH JBEnt_pa.7455B110 ; |ThreadFunction = JBEnt_pa.7455B110 74557CF4 |. 6A 00 PUSH 0 ; |StackSize = 0 74557CF6 |. 6A 00 PUSH 0 ; |pSecurity = NULL 74557CF8 |. FFD6 CALL ESI ; \CreateThreadYou must compile. and inject or hooked dll.Code:7455B110 . 53 PUSH EBX 7455B111 . 8B1D 4CD05574 MOV EBX,DWORD PTR DS:[<&KERNEL32.SetProc>; KERNEL32.SetProcessWorkingSetSize 7455B117 . 56 PUSH ESI 7455B118 . 8B35 44D05574 MOV ESI,DWORD PTR DS:[<&KERNEL32.GetCurr>; KERNEL32.GetCurrentProcess 7455B11E . 57 PUSH EDI 7455B11F . 8B3D 78D05574 MOV EDI,DWORD PTR DS:[<&KERNEL32.Sleep>] ; KERNEL32.Sleep 7455B125 > 68 88130000 PUSH 1388 7455B12A . FFD7 CALL EDI 7455B12C . 6A FF PUSH -1 7455B12E . 6A FF PUSH -1 7455B130 . FFD6 CALL ESI 7455B132 . 50 PUSH EAX 7455B133 . FFD3 CALL EBX 7455B135 . 6A FE PUSH -2 7455B137 . FFD6 CALL ESI 7455B139 . 50 PUSH EAX ; |hThread 7455B13A . FF15 48D05574 CALL DWORD PTR DS:[<&KERNEL32.SetThreadP>; \SetThreadPriority 7455B140 .^EB E3 JMP SHORT JBEnt_pa.7455B125
Source:
Code:#include <Windows.h> void cpu(){ HANDLE v1; HANDLE v2; while ( 1 ) { Sleep(5000); v1 = GetCurrentProcess(); SetProcessWorkingSetSize(v1, 0xFFFFFFFF, 0xFFFFFFFF); v2 = GetCurrentProcess(); SetThreadPriority(v2, -2); } } BOOL APIENTRY DllMain(HMODULE hM, DWORD dwR, LPVOID lpR) { if(dwR == 0x01) { CreateThread(NULL,NULL,LPTHREAD_START_ROUTINE(cpu),NULL,0,0); } return true; }
I test in 1.04E GMO.
Maybe help.
Voila.



Reply With Quote

