Advertisement
Guest User

Untitled

a guest
Jul 27th, 2017
61
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. proc DeleteMe
  2.         xor eax,eax
  3.         push    DeleteFile1
  4.         push    FreeLibrary1
  5.         push    GetModuleFileName1
  6.         call    _GetProcAddress
  7.         call    _GetProcAddress
  8.         call    _GetProcAddress
  9.         mov ecx,sizecode
  10.         mov esi,startcode
  11.         mov edi,[fs:8]
  12.         push edi
  13.         rep movsb
  14.         mov esi,[FreeLibrary1]
  15.         mov edi,[DeleteFile1]
  16.         mov eax,[GetModuleFileName1]
  17.         mov ecx,[esp]
  18.         add ecx,sizecode
  19.         ret
  20.  
  21. startcode:
  22.         push ecx
  23.  
  24.         push  256
  25.         push  ecx
  26.         push  0
  27.         call  eax
  28.         push [inst]
  29.         call  esi
  30.         call edi
  31.  
  32.         ret
  33. endcode:
  34. ret
  35. endp
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement