Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [ENABLE]
- alloc(YoYoDupe, 1024)
- alloc(RunFlag, 4)
- alloc(ESIValue, 4)
- alloc(EDIValue, 4)
- alloc(ESIAddy,4)
- alloc(hookit,128)
- registersymbol(YoYoDupe)
- registersymbol(hookit)
- registersymbol(ESIAddy)
- label(NoVac)
- label(DupeXVac)
- label(DoNormal)
- YoYoDupe: //6A3088 @ EMS032 was 6998E0
- push eax
- push ecx
- cmp [RunFlag], 2
- je DupeXVac
- mov eax, 006E7AE0 // 89 45 EC 8D 45 D4 50
- mov eax, [eax]
- add eax, 61C
- mov eax, [eax]
- sub eax, C
- mov [ESIValue],eax
- mov eax,[eax+114]
- mov [EDIValue],eax
- inc [RunFlag]
- inc [RunFlag]
- DupeXVac:
- cmp esi,[ESIValue]
- je DoNormal
- push ecx
- mov ecx,ESIAddy
- mov [ecx],esi
- pop ecx
- DoNormal:
- mov [esi+00000110],edi
- pop ecx
- pop eax
- jmp 6A3418
- ESIAddy:
- db 00 00 00 00
- RunFlag:
- db 00 00 00 00
- ESIValue:
- db 00 00 00 00
- EDIValue:
- db 00 00 00 00
- hookit: //5250D6 @ EMS033 was 520591
- cmp [ESIAddy], 0
- je NoVac
- push eax
- push ebx
- mov eax,[ESIAddy]
- mov ebx,[EDIValue]
- mov [eax+110],ebx
- mov eax,[eax+110]
- mov [eax+4c],ebx
- mov [eax+50],ebx
- pop ebx
- pop eax
- NoVac:
- mov [ebx+00000400],eax
- jmp 525437
- 006A6319:
- jmp YoYoDupe
- 00527DD3:
- jmp hookit
- [DISABLE]
- 006A6319: //89 BE 10 01 00 00 E8 98
- db 89 BE 10 01 00
- 00527DD3: //89 83 00 04 00 00 8D 85
- db 89 83 00 04 00
- unregistersymbol(YoYoDupe)
- dealloc(YoYoDupe)
- dealloc(RunFlag)
- dealloc(ESIValue)
- dealloc(EDIValue)
- dealloc(ESIAddy)
- dealloc(hookit)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement