I'm guessing you are trying to do something like this:
Look at all the nops. You're new function is to long, so it starts over writing the next one (MOV ECX,DWORD PTR DS:[455608] disappeared).
You'll probably have to jump to a new location, then do
MOV EAX,DWORD PTR SS:[459FE0] ; eax holds your text
MOV ECX,DWORD PTR DS:[455608] ; ecx holds a magical number, this line gets over written.
jmp 00424425 ; jumps back
BTW, if you look at the code, you should be able to notice how there are 3 possible thingies (lack of a better word).
You're going to have to modify all 3 of them :p.
|
ASM-Code:
0042441B 36:A1 E09F4500 MOV EAX,DWORD PTR SS:[459FE0] 00424421 90 NOP 00424422 90 NOP 00424423 90 NOP 00424424 90 NOP 00424425 . 68 B4B4FF00 PUSH 0FFB4B4 |
Look at all the nops. You're new function is to long, so it starts over writing the next one (MOV ECX,DWORD PTR DS:[455608] disappeared).
You'll probably have to jump to a new location, then do
MOV EAX,DWORD PTR SS:[459FE0] ; eax holds your text
MOV ECX,DWORD PTR DS:[455608] ; ecx holds a magical number, this line gets over written.
jmp 00424425 ; jumps back
BTW, if you look at the code, you should be able to notice how there are 3 possible thingies (lack of a better word).
|
ASM-Code:
004243E4 . 8B5424 1C MOV EDX,DWORD PTR SS:[ESP+1C] ; start of 1 004243E8 . A1 08564500 MOV EAX,DWORD PTR DS:[455608] 004243ED . 68 6464FF00 PUSH 0FF6464 004243F2 . 68 0D1B6000 PUSH lf2_load.00601B0D 004243F7 . 52 PUSH EDX 004243F8 . 50 PUSH EAX 004243F9 . EB 36 JMP SHORT lf2_load.00424431 ; end of 1 004243FB > 83C2 FB ADD EDX,-5 004243FE . 83FA 02 CMP EDX,2 00424401 . 77 18 JA SHORT lf2_load.0042441B 00424403 . 8B4C24 1C MOV ECX,DWORD PTR SS:[ESP+1C] ; start of 2 00424407 . 8B15 08564500 MOV EDX,DWORD PTR DS:[455608] 0042440D . 68 FFFFFF00 PUSH 0FFFFFF 00424412 . 68 0D1B6000 PUSH lf2_load.00601B0D 00424417 . 51 PUSH ECX 00424418 . 52 PUSH EDX 00424419 . EB 16 JMP SHORT lf2_load.00424431 ; end of 2 0042441B 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C] ; start of 3 0042441F 8B0D 08564500 MOV ECX,DWORD PTR DS:[455608] 00424425 . 68 B4B4FF00 PUSH 0FFB4B4 0042442A 68 0D1B6000 PUSH lf2_load.00601B0D 0042442F . 50 PUSH EAX 00424430 . 51 PUSH ECX 00424431 > E8 5ACEFDFF CALL lf2_load.00401290 ; end of 3 |
You're going to have to modify all 3 of them :p.
![[Image: doty7Xn.gif]](http://i.imgur.com/doty7Xn.gif)
10 ʏᴇᴀʀs sɪɴᴄᴇ ɪʀᴄ ɢᴏᴏᴅ.ɪ ᴡᴀʟᴋ ᴛʜʀᴏᴜɢʜ ᴛʜᴇ ᴇᴍᴘᴛʏ sᴛʀᴇᴇᴛs ᴛʀʏɪɴɢ ᴛᴏ ᴛʜɪɴᴋ ᴏғ sᴏᴍᴇᴛʜɪɴɢ ᴇʟsᴇ ʙᴜᴛ ᴍʏ ᴘᴀᴛʜ ᴀʟᴡᴀʏs ʟᴇᴀᴅs ᴛᴏ ᴛʜᴇ ɪʀᴄ. ɪ sᴛᴀʀᴇ ᴀᴛ ᴛʜᴇ sᴄʀᴇᴇɴ ғᴏʀ ʜᴏᴜʀs ᴀɴᴅ ᴛʀʏ ᴛᴏ sᴜᴍᴍᴏɴ ᴛʜᴇ ɢᴏᴏᴅ ɪʀᴄ. ɪ ᴡᴀᴛᴄʜ ᴏᴛʜᴇʀ ɪʀᴄ ᴄʜᴀɴɴᴇʟs ʙᴜᴛ ɪᴛ ɪs ɴᴏ ɢᴏᴏᴅ. ɪ ᴘᴇsᴛᴇʀ ᴢᴏʀᴛ ᴀɴᴅ ᴛʀʏ ᴛᴏ ʀᴇsɪsᴛ ʜɪs sᴇxɪɴᴇss ʙᴜᴛ ɪᴛ ɪs ᴀʟʟ ᴍᴇᴀɴɪɴɢʟᴇss. ᴛʜᴇ ᴇɴᴅ ɪs ɴᴇᴀʀ.ɪ ᴛʜᴇɴ ᴜsᴜᴀʟʟʏ ʀᴇᴀᴅ sᴏᴍᴇ ᴏʟᴅ ɪʀᴄ ʟᴏɢs ᴀɴᴅ ᴄʀʏ ᴍʏsᴇʟғ ᴛᴏ sʟᴇᴇᴘ.

Chat

