Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [ENABLE]
- alloc(newmem,2048)
- label(returnhere)
- label(code)
- label(exit)
- label(silver)
- label(gold)
- label(aobd)
- registersymbol(aobd)
- aobscan(aob,66 0F D6 45 E4 66 0F D6 45 EC 05)
- newmem:
- push eax
- mov eax, [esp+38]
- cmp byte [eax+9],'B'
- jne silver
- cmp byte [eax+A],'r'
- jne silver
- cmp byte [eax+B],'o'
- jne silver
- cmp byte [eax+C],'n'
- jne silver
- cmp byte [eax+F],'C'
- jne silver
- pop eax
- mov eax, 00000000
- push eax
- jmp code
- silver:
- cmp byte [eax+9],'S'
- jne gold
- cmp byte [eax+A],'i'
- jne gold
- cmp byte [eax+B],'l'
- jne gold
- cmp byte [eax+C],'v'
- jne gold
- cmp byte [eax+F],'C'
- jne gold
- pop eax
- mov eax, 00000000
- push eax
- jmp code
- gold:
- cmp byte [eax+9],'G'
- jne code
- cmp byte [eax+A],'o'
- jne code
- cmp byte [eax+B],'l'
- jne code
- cmp byte [eax+C],'d'
- jne code
- cmp byte [eax+D],'C'
- jne code
- pop eax
- mov eax, 00000000
- push eax
- jmp code
- code:
- pop eax
- movq [ebp-1C],xmm0
- exit:
- jmp returnhere
- aob: //66 0F D6 45 E4 66 0F D6 45 EC 05
- aobd:
- jmp newmem
- returnhere:
- [DISABLE]
- aobd:
- movq [ebp-1C],xmm0
- unregistersymbol(aobd)
- dealloc(newmem)
Advertisement
Add Comment
Please, Sign In to add comment