viewing paste Unknown #6445 | PHP

Posted on the
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
<?php
    function SkipLicenseScreen($exe) {
        if ($exe === true) {
           return new xPatch(50, 'Skip License Screen', 'UI', 0, 'Skip the warning screen and goes directly to the main window with the Service Select.');
        }
       
        // Find offset of btn_disagree
        $btnoff = $exe->str("btn_disagree", "rva");
       
        // Find the location where it is pushed
        $finish = $exe->code("\x68". pack("I",$btnoff));
       
        $start = $finish - 0x1A0;//will increase this number if necessary
       
        // Now find the jump table jumper inside that address set.
        $offset = $exe->match("\xFF\x24\x85\xAB\xAB\xAB\x00", "\xAB", $start, $finish);
       
        // Now retrieve the jumptable address from the instruction
        $jmpoffset = $exe->read($offset + 3, 4, "I");
        $jmpoffset = $exe->Rva2Raw($jmpoffset);// we need raw address
       
        // Pick up the third entry in jumptable
        $third = $exe->read($jmpoffset + 8, 4);
       
        // Now replace first and second with third.
        $exe->replace($jmpoffset, array(0 => $third, 4 => $third));
                       
        return true;
    }
?>
Viewed 294 times, submitted by unknown.