|
|
|
|
#1
08-30-2003, 21:09
|
|||
|
|||
|
push fs:[30h]
pop eax TEST EAX, EAX JS _win9x _iswinnt: MOV EAX, [EAX+0Ch] MOV EAX, [EAX+0Ch] MOV DWORD PTR [EAX+20h], 1000h ; change proc size=1000h JMP _over _win9x: PUSH 0 CALL GetModuleHandle TEST EDX, EDX JNS _over CMP DWORD PTR [EDX+8], -1 JNE _over MOV EDX, [EDX+4] MOV DWORD PTR [EDX+50h], 1000h ; change proc size=1000h  sorry 4 my poor english
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| How come new registrants given "guest" rank and not even a "friend" rank? | OldieHans | General Discussion | 4 | 09-25-2023 12:19 |
| When use "vendor defined encryption routines", how to set daemon related part? | bridgeic | General Discussion | 6 | 01-22-2015 11:35 |
| Wlscgen: Are "Vendor Id" and "Developer Id" different ? | Numega Softice | General Discussion | 6 | 02-12-2007 18:12 |
Hybrid Mode
