Xemectrum

Chance wrote:i dont understand , Nerrazzuri , r you referring to the one the starter of this thread posted or the other one in ******?

Chance wrote:not really , someone pmed me regarding it
dunnoe how to convert to DLL sia -_-

Nerrazzuri wrote:Yes, the script doesn't work.

helohelo wrote:

Code: Select all

#define CRCADDY = 0x009f6096

DWORD mscrc = CRCADDY;
DWORD mscrcret = (CRCADDY + 6);

void __declspec(naked) _stdcall MsCrcAsm()
{
   __asm
   {
		push eax
		lea eax,[ecx]
		cmp ecx,0x00401000
		jl Normal
		cmp ecx,0x00B00000
		jg Normal
		sub ecx,0x00401000
		push eax
		lea eax,[dump]
		add ecx,eax
		pop eax
		movzx ecx,byte ptr [eax]
		mov edx,[ebp+0x14]

		Normal:
		movzx ecx,byte ptr [ecx]
		mov edx,[ebp+0x14]

		copy:
		mov eax,0x00401000
		lea ecx,[dump]

		llop:
		xor ebx,ebx
		movzx ebx,byte ptr [eax]
		mov byte ptr [ecx],bl
		inc eax
		inc ecx
		cmp eax,0x00B00000
		jg getoutahere
		jmp llop
		getoutahere:
		lea ebx,[dump]
		add ebx,0x005F5096// - 401000 
		xor eax,eax              
		mov al,0x0F
		mov byte ptr [ebx],al
		inc ebx
		mov al,0xB6
		mov byte ptr [ebx],al
		inc ebx
		mov al,0x09
		mov byte ptr [ebx],al
		inc ebx
		mov al,0x8B
		mov byte ptr [ebx],al
		inc ebx
		mov al,0x55
		mov byte ptr [ebx],al
		ret

   }
}

void MSHSCRC()
{
       *(BYTE*)mscrc = 0xE9;
       *(DWORD*)(mscrc + 1) = jmp(mscrc, MsCrcAsm);
       *(BYTE*)(mscrc + 5) = 0x90;
}

Code: Select all

[enable]
alloc(mscrc,100)
alloc(hscrc,100)
alloc(copy,1024)
alloc(dump,88568340)
createthread(copy)
label(exitmscrc)
label(mscrcret) 
label(hscrcret)
label(llop)
label(getoutahere)

mscrc:
cmp ecx,00401000
jl exitmscrc
cmp ecx,00B00000
jg exitmscrc
sub ecx,00401000
push eax
lea eax,[dump]
add ecx,eax
pop eax
exitmscrc:
movzx ecx,byte ptr [ecx]
mov edx,[ebp+14]
jmp mscrcret 

copy:
mov eax,00401000
lea ecx,[dump]

llop:
xor ebx,ebx
movzx ebx,byte ptr [eax]
mov byte ptr [ecx],bl
inc eax
inc ecx
cmp eax,00B00000
jg getoutahere
jmp llop
getoutahere:
lea ebx,[dump]
add ebx,5f5096//9f6096 - 401000 
xor eax,eax              
mov al,0F
mov byte ptr [ebx],al
inc ebx
mov al,B6
mov byte ptr [ebx],al
inc ebx
mov al,09
mov byte ptr [ebx],al
inc ebx
mov al,8B
mov byte ptr [ebx],al
inc ebx
mov al,55
mov byte ptr [ebx],al
ret

hscrc:
mov eax,fs:[20]
cmp eax,[esp+0c]
jne hscrcret
mov fs:[34],57
xor eax,eax
ret 000c

hscrcret:
mov edi,edi
push ebp
mov ebp,esp
jmp OpenProcess+05

009f6096:
jmp mscrc
db 14
mscrcret:

OpenProcess:
jmp hscrc

[disable]
009f6096:
db 0F B6 09 8B 55 14 
OpenProcess:
db 8B FF 55 8B EC

dealloc(mscrc)
dealloc(hscrc)
dealloc(dump)
dealloc(copy)

Byakuya wrote:is this script working?
cuz ive tested it and its not working...
does anyone else face same problem as me?