PATCH CONFUSER WITHOUT REFLECTOR

By Predator www.nexenteam.net

Protection: Conf !er ".# max$m n %rote&t$on Target: 'efeat ant$tam%er %rote&t$on from &ra&(me S%e))a& or$ *$n t+$! ar&+$,e- and %at&+ $t. Tools: . S$m%/e 0SIL 'e&ry%tor . Un$,er!a/ F$xer . SAE . CFF Ex%/orer . 'otNet Tra&er *o%t$ona/ for fa!t f$nd$n1 w+ere to %at&+O%en t+e exe w$t+ S$m%/e 0SIL 'e&ry%tor and ma(e ! re yo &+e&( LoadL$2rary

%re!! de&ry%t and now we +a,e Cra&(0e3m!$/.exe4 2 t t+e exe !t$// no r n4 we m !t f$x more for r n $t.

T+en O%en $t w$t+ Un$,er!a/ F$xer4 w$t+ t+e defa /t o%t$on! and %re!! 5F$x a!!em2/y6

Now we +a,e Cra&(0e3m!$/3f$x.exe t+at !t$// not wor( 2e&a !e we m !t f$x t+e ant$tam%er %rote&t$on. O%en $t w$t+ SAE *S$m%/e A!!em2/y Ex%/orer-: On t+e Sear&+ !e/e&t for 7Str$n174 % t t+e wor/d! 7Bro(en f$/e74 and on /eft %ane/ !e/e&t 7Conf !edByAttr$2 te7 /$(e t+$! $ma1e:

%re!! 5Next64 we f$nd t+e !tr$n1.

Now we m !t ta(e t+e R8A of t+e f$r!t $n!tr &t$on of t+$! met+od4 we +a,e 9 way f$r!t way: . mo,e at t+e f$r!t /$ne of &ode and mo,e t+e mo !e o,er t+e !e&ond &o/on o,er 7L3::::7: and a too%t$%! !+ow t+e R8A :x;<f#a

!e&ond way: . !e/e&t t+e ta2 =enera/ and !ee t+$!

we !ee R8A: :x;<f>e we add t+e +ex ,a/ e :xC *"9 de&- t+at $! t+e !$)e of t+e Fat Header4 and we +a,e :x;<f#a.

Now we 1o to defeat t+e ant$tam%er %rote&t$on4 o%en Cra&(0e3m!$/3f$x.exe w$t+ CFF Ex%/orer and 1o to Addre!! Con,erter. On t+e R8A 2ox % t t+e ,a/ e ? !t &a/& /ated: ;<f#a and %re!! enter. CFF $! !+ow t+e exa&t off!et of t+e ant$tam%er met+od

for defeat $t4 we &+an1e t+e f$r!t $!tr &t$on of exe w$t+ a RET. T+e +exade&$ma/ ,a/ e of t+e o%&ode Ret $! 9A4 t+en &+an1e ': to 9A From

To

and !a,e t+e exe w$t+ a d$fferent name ex. Cra&(0e3m!$/3f$x9.exe Try to run it, good it's work! ;-)

Now %at&+ t+e &ra&(me for a&&e%t any !er$a/ $! ea!y. I t+$n( t+ere are ,ar$o ! te&+n$@ e! to f$nd t+e r$1+t %o$nt... for fa!t f$nd t+e Net met+od to %at&+4 I !e a 'otNet Tra&er *'AT By A ra%$&a-. I r n t+e &ra&(me on t+e tra&er and wa$t for /oad &om%/ete/y. Now I &o%y t+e /a!t %arent &/a!!:

t+en I %a!te t+e B !tr$n1 on SAE and !ear&+ for C/a!!Name:

We//4 we are on t+e %arent &/a!!4 I yo !&ro// t+e met+od $n!$de t+$! &/a!! yo &an ea!$/y f$nd t+e &ode to %at&+:

Ce! t+$! $! t+e met+od to %at&+. If yo Dre +andy of IL &ode4 yo &an !e de<dot o,er t+$! exe& ta2/e for ma(e &ode more reada2/e4 2 t t+e exe donDt r n anymore. O( I &an %at&+ $t for a&&e%t any !er$a/. Too ea!yE Loo( at row # 2ne. n.! &+e&( $f t+e ,a/ e $! FF to : we !e t+e !ame te&+n$@ e for defeat ant$tam%er4 for ed$t 2ne. n.! to 21e.!.

Loo( at R8A t+at $! :x<#e:d

T+en 1o to CFF .G Addre!! Con,erter % t on R8A 2ox t+e ,a/ e <#e:d and %re!! enter4 and &+an1e HH to 9E t+at $! t+e +ex ,a/ e of o%&ode 21e.!. Sa,e and f$n$!+ :.-

0y t+an(! f/y to all re,er!$n1 team and $nd$,$d a/ re,er!er4 e!%e&$a//y to a// mem2er! of t+e UIC and Sn' Team. Predator