Advertisement
Guest User

Untitled

a guest
Mar 18th, 2020
653
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.09 KB | None | 0 0
  1. [ENABLE]
  2. define(CRC1StartAddress,0311EDB0) //Address to replace
  3.  
  4. alloc(CRC1Copy,$2048)
  5. CRC1Copy:
  6. readmem(CRC1StartAddress, 2048)
  7.  
  8. aobscanmodule(CRC2,TERA.exe,8B 00 29 DF 29 C2) //Replace this
  9. registersymbol(CRC2)
  10. alloc(newmem,$20)
  11.  
  12. label(code)
  13. label(return)
  14.  
  15. newmem:
  16. //Also replace the register with the same register in the original memory
  17. sub eax, CRC1StartAddress
  18. add eax, CRC1Copy
  19. code:
  20. mov eax,[eax]
  21. sub edi,ebx
  22. sub edx,eax
  23. jmp return
  24.  
  25. CRC2:
  26. //Make sure there are the correct amount of nops here.
  27. jmp newmem
  28. nop
  29. return:
  30.  
  31. ////////////////////////////////////////////////////////////////////
  32. aobscanmodule(CRC1,TERA.exe,5B 83 C4 04 C3) //Replace this
  33. registersymbol(CRC1)
  34. alloc(CRC1NewCode,$20)
  35.  
  36. label(codeAaA)
  37. label(returnAaA)
  38.  
  39. CRC1NewCode:
  40. codeAaA:
  41. pop ebx
  42. add esp,04
  43. mov eax,#1
  44. ret
  45. jmp returnAaA
  46.  
  47. CRC1:
  48. //Make sure there are no nops here
  49. jmp CRC1NewCode
  50. returnAaA:
  51.  
  52.  
  53. [DISABLE]
  54.  
  55. CRC1:
  56. db 5B 83 C4 04 C3
  57. unregistersymbol(CRC1)
  58. dealloc(CRC1NewCode)
  59.  
  60. CRC2:
  61. db 8B 00 29 DF 29 C2
  62. unregistersymbol(CRC2)
  63. dealloc(newmem)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement