Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- DWORD dwUFunction, dwVoid1, dwVoid2;
- DWORD dwJMPback = 0x101375A6; // you could aswell jump back at 0x101375A5
- ...
- __declspec(naked) void _OurFunction()
- {
- __asm
- {
- PUSH EDX //save the register
- MOV EDX, DWORD PTR [EBP]
- MOV dwUFunction, EDX
- MOV EDX, DWORD PTR [EBP + 0x4]
- MOV dwVoid1, EDX
- MOV EDX, DWORD PTR [EBP + 0x8]
- MOV dwVoid2, EDX
- POP EDX //restore the register
- // Do your hax stuff, etc.
- // but REMEBER TO PRESERVE THE STACK & REGISTERS !!!
- // WE HAVE TO EXECUTE THE OVERWRITTEN INSTRUCTIONS !!!!
- MOV DWORD PTR [EBP - 0x10], ESP
- MOV DWORD PTR [EBP - 0x14], ESI
- // now we can jump back ^^
- JMP [ dwJMPback ]
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment