View Single Post
  #5  
Old 09-02-2005, 21:59
Archer's Avatar
Archer Archer is offline
retired
 
Join Date: Aug 2005
Posts: 243
Rept. Given: 1
Rept. Rcvd 46 Times in 19 Posts
Thanks Given: 3
Thanks Rcvd at 387 Times in 57 Posts
Archer Reputation: 46
Ahhh, I guess command should start from CC, and command should not become a mess after patching, only then it's real nanomite. I got it, OK. But why then this command
OLD
mov dword ptr [ebp-34],esp
NEW
mov dword ptr [ebp-15],esp
is a real nanomite? Or there is mistake in this tut?

Last edited by Archer; 09-02-2005 at 22:08.