From 2cbc4ab6c9bccf5c863efa093f40f306a52fcc9d Mon Sep 17 00:00:00 2001 From: n-a-c-h Date: Tue, 27 May 2008 08:35:36 +0000 Subject: [PATCH] Move some data from function to global to take it off the stack, and make it harder to find when browsing the code with a process viewer. --- src/win32/VBA.cpp | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/win32/VBA.cpp b/src/win32/VBA.cpp index 39e46f2a..cca2f635 100644 --- a/src/win32/VBA.cpp +++ b/src/win32/VBA.cpp @@ -482,13 +482,13 @@ static int parseCommandLine(char *cmdline, char **argv) return(argc); } +static char kernel_encoded[] = { 0x14, 0xef, 0xe1, 0xe3, 0x18, 0x1c, 0xd1, 0x1f, 0xdd, 0x21, 0x25, 0x21, 0x00 }; +static char getname_encoded[] = { 0xc8, 0x33, 0x3f, 0xdc, 0xdd, 0x21, 0x2a, 0x2e, 0xd5, 0x0f, 0x08, 0x0c, 0xf7, 0x15, 0xea, 0xe9, 0x12, 0xcd, 0x00 }; +static char exit_encoded[] = { 0xca, 0xd2, 0xd5, 0xd9, 0x29, 0x27, 0x26, 0xdb, 0x20, 0x2d, 0x20, 0x00 }; + static lpExitProcess protectHelp[2] = { (lpExitProcess)srand, pExitProcess }; int VBA::doProtection() { - char kernel_encoded[] = { 0x14, 0xef, 0xe1, 0xe3, 0x18, 0x1c, 0xd1, 0x1f, 0xdd, 0x21, 0x25, 0x21, 0x00 }; - char getname_encoded[] = { 0xc8, 0x33, 0x3f, 0xdc, 0xdd, 0x21, 0x2a, 0x2e, 0xd5, 0x0f, 0x08, 0x0c, 0xf7, 0x15, 0xea, 0xe9, 0x12, 0xcd, 0x00 }; - char exit_encoded[] = { 0xca, 0xd2, 0xd5, 0xd9, 0x29, 0x27, 0x26, 0xdb, 0x20, 0x2d, 0x20, 0x00 }; - char szEXEFileName[260]; *szEXEFileName = 0;