Jul 30, 2014 at 1:19 AM
Join Date: Jan 19, 2014
Location:
Posts: 16
Woopsie.
There were supposed to be three pieces of code, but while formatting that post I accidentally deleted one and put another at the wrong offset.
The correct code is:
0x415474:
0x415584:
0x4156b0:
http://www.filedropper.com/doukutsububble
There were supposed to be three pieces of code, but while formatting that post I accidentally deleted one and put another at the wrong offset.
The correct code is:
0x415474:
Code:
jmp 415495
Code:
mov eax,dword ptr ds:[49E650]
and eax,00000010
je short 004155A3
mov ecx,dword ptr ds:[49E63C]
and ecx,00000100
je short 004155A3
call 00415631
jmp short 004155B1
cmp dword ptr ds:[49E64C],1
jne short 004155B3
call 00415631
jmp short 004155C5
mov eax,dword ptr ds:[49E6C8]
shr eax,2
and eax,00000001
je short 004155C5
call 00415631
mov esp,ebp
pop ebp
ret
Code:
ret