Advertisement
Guest User

Untitled

a guest
Feb 6th, 2016
54
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.91 KB | None | 0 0
  1. [Enable]
  2. Alloc(WalkingMobsLemmings,256)
  3. Label(JMP1)
  4. Label(JMP2)
  5. Label(JMP3)
  6. //0F 84 ? ? ? ? 83 ? ? 0F 84 ? ? ? ? DD
  7. WalkingMobsLemmings: //Follow AoB
  8. fcompp
  9. lea edi,[esi+00000140]// 100
  10. fnstsw ax
  11. test ah,05
  12. jp JMP1
  13. mov edx,[esi+00000148]// 108
  14. push edx
  15. push edi
  16. call 004B3E30
  17. lea ecx,[eax+10] // 0C
  18. mov eax,[ecx]
  19. mov edx,[eax+38]
  20. add esp,08
  21. call edx
  22. jmp JMP2
  23.  
  24.  
  25. JMP1:
  26. mov eax,[esi+00000148] // 108
  27. push eax
  28. push edi
  29. call 004B3E30
  30. mov edx,[eax+10] // 0c
  31. lea ecx,[eax+10] // 0c
  32. mov eax,[edx+3C]
  33. add esp,08
  34. call eax
  35.  
  36.  
  37. JMP2:
  38. test eax,eax
  39. je JMP3
  40. mov edx,[eax+10] // 0c
  41. add eax,10 // 0c
  42. mov ecx,eax
  43. mov eax,[edx+1C]
  44. call eax
  45. fcomp qword ptr [01D1CEE8]
  46. fnstsw ax
  47. test ah,41
  48. jnp 017C2360 //Follow JP below ^ (2nd address above result, keep as JNP)
  49.  
  50.  
  51. JMP3:
  52. jmp 017C2364 //Address in original JP^
  53.  
  54.  
  55. 017C19DD: //Address of AoB
  56. je WalkingMobsLemmings
  57.  
  58.  
  59. [Disable]
  60. 017C19DD: //Address of AoB
  61. je 017C2222 //original op
  62.  
  63.  
  64. DeAlloc(WalkingMobsLemmings)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement