Guest User

Untitled

a guest
Oct 20th, 2017
88
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. alloc(newmem,2048) //2kb should be enough
  2. label(returnhere)
  3. label(originalcode)
  4. label(exit)
  5.  
  6. newmem: //this is allocated memory, you have read,write,execute access
  7. //place your code here
  8. push eax
  9. mov eax, "ggpofba.exe"+687190
  10. mov [eax+26334],000F
  11. pop eax
  12.  
  13. originalcode:
  14. push ebp
  15. mov ebp,esp
  16. push ecx
  17. cmp dword ptr [ebp+08],00
  18.  
  19. exit:
  20. jmp returnhere
  21.  
  22. "ggponet.dll"+21BB0:
  23. jmp newmem
  24. nop
  25. nop
  26. nop
  27. returnhere:
Add Comment
Please, Sign In to add comment