Skip to content

Instantly share code, notes, and snippets.

@kungfulon
Created November 6, 2019 18:44
Show Gist options
  • Save kungfulon/e705b3c9f789675efe0473daf3adae9a to your computer and use it in GitHub Desktop.
Save kungfulon/e705b3c9f789675efe0473daf3adae9a to your computer and use it in GitHub Desktop.
// Source: https://github.com/vdisasm/ScyllaHideForIda7
// Patch win32_user.dll
unsigned char pattern[6] =
{
0x49, 0x83, 0xFB, 0x02, // cmp r11, 2
0x72, 0x20 // jb +0x20
};
unsigned char JmpRel = 0xEB;
if (memcmp(mod + 0x1439F, pattern, sizeof(pattern)) == 0)
{
WriteMem(mod + 0x1439F + 4, &JmpRel, 1);
alreadyPatched = true;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment