New Bypass method Error 31_0

Originally Posted by dreek1

Happy Leecher

Code:

1070116F  |. 8047 19 01     |ADD BYTE PTR DS:[EDI+19],1 //ADDR 0x70116F
10701173  |. 83C5 01        |ADD EBP,1
10701176  |. 83C6 30        |ADD ESI,30
10701179  |. 83C3 10        |ADD EBX,10
1070117C  |. 83FD 03        |CMP EBP,3
1070117F  |. 897424 18      |MOV DWORD PTR SS:[ESP+18],ESI
10701183  |.^0F8C 11FEFFFF  \JL CShell_0.10700F9A
10701189  |. B0 01          MOV AL,1
1070118B  |. 8B8C24 B401000>MOV ECX,DWORD PTR SS:[ESP+1B4]
10701192  |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
10701199  |. 59             POP ECX
1070119A  |. 5F             POP EDI
1070119B  |. 5E             POP ESI
1070119C  |. 5D             POP EBP
1070119D  |. 5B             POP EBX
1070119E  |. 8B8C24 9C01000>MOV ECX,DWORD PTR SS:[ESP+19C]
107011A5  |. 33CC           XOR ECX,ESP
107011A7  |. E8 98B84C00    CALL CShell_0.10BCCA44

Thanks, now I got the string and pattern.

Originally Posted by dreek1

Happy Leecher

Code:

1070116F  |. 8047 19 01     |ADD BYTE PTR DS:[EDI+19],1 //ADDR 0x70116F
10701173  |. 83C5 01        |ADD EBP,1
10701176  |. 83C6 30        |ADD ESI,30
10701179  |. 83C3 10        |ADD EBX,10
1070117C  |. 83FD 03        |CMP EBP,3
1070117F  |. 897424 18      |MOV DWORD PTR SS:[ESP+18],ESI
10701183  |.^0F8C 11FEFFFF  \JL CShell_0.10700F9A
10701189  |. B0 01          MOV AL,1
1070118B  |. 8B8C24 B401000>MOV ECX,DWORD PTR SS:[ESP+1B4]
10701192  |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
10701199  |. 59             POP ECX
1070119A  |. 5F             POP EDI
1070119B  |. 5E             POP ESI
1070119C  |. 5D             POP EBP
1070119D  |. 5B             POP EBX
1070119E  |. 8B8C24 9C01000>MOV ECX,DWORD PTR SS:[ESP+19C]
107011A5  |. 33CC           XOR ECX,ESP
107011A7  |. E8 98B84C00    CALL CShell_0.10BCCA44

can i have some pattern for cfph

what can i do get to disconnection bypass?

thanks

Post a Reply

Similar Threads

Tags for this Thread