Originally Posted by minhevil
hello i'm a newbie so i don't know how to code for EX this code i don't know how to use it ? plz help me
Pattern: 83 F8 FF 0F 84 ?? ?? ?? ?? 56 50 E8
105D1C2A | 83 F8 FF | cmp eax,-01 |
105D1C2D | C7 44 24 14 00 00 00 00 | je 105D1E2A |
105D1C33 | 56 | push esi |
105D1C34 | 50 | push eax |
105D1C35 | E8 86 CD DB FF | call 1038E9C0 | -> function called to check
105D1C3A | 8B F0 | mov esi,eax |
105D1C3C | 83 C4 04 | add esp,04 |
105D1C3F | 85 F6 | test esi,esi |
105D1C41 | 0F 84 E2 01 00 00 | je 105D1E29 | He's here, now change je -> jmp
105D1C4D | D9 86 58 10 00 00 | fld dword ptr [esi+00001058] |
105D1C54 | 0F B6 86 BC 0B 00 00 | movzx eax,byte ptr [esi+00000BBC] |
Pattern: 83 F8 FF 0F 84 ?? ?? ?? ?? 56 50 E8
105D1C2A | 83 F8 FF | cmp eax,-01 |
105D1C2D | C7 44 24 14 00 00 00 00 | je 105D1E2A |
105D1C33 | 56 | push esi |
105D1C34 | 50 | push eax |
105D1C35 | E8 86 CD DB FF | call 1038E9C0 | -> function called to check
105D1C3A | 8B F0 | mov esi,eax |
105D1C3C | 83 C4 04 | add esp,04 |
105D1C3F | 85 F6 | test esi,esi |
105D1C41 | 0F 84 E2 01 00 00 | je 105D1E29 | He's here, now change je -> jmp
105D1C4D | D9 86 58 10 00 00 | fld dword ptr [esi+00001058] |
105D1C54 | 0F B6 86 BC 0B 00 00 | movzx eax,byte ptr [esi+00000BBC] |
"U can use this code"
Code:
if(!BYPASS)
{
BYPASS= FindPattern(EXcshell,0x1280000,(BYTE *)"\x83\xF8\xFF\x0F\x84\x??\x??\x??\x??\x56\x50\xE8","xxxx????xxx");
}
else
{
PatchMemory((void *)(BYPASS+ 0x3),(void*)(PBYTE) "\xE9\xE3\x01\x00\x00\x90", 6);
}