Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- // JMS v407.1
- // Name Tag
- [Enable]
- Alloc(Hook, 512)
- Label(Return)
- Label(NameTag)
- Hook:
- push rdx
- sub rsp,20
- mov r8d,0000000D
- mov rcx,rsi
- call 14090EDB0 // DecodeBuffer
- add rsp,20
- pop rdx
- push rax
- push rcx
- push rdx
- lea rcx,[NameTag]
- mov rax,[rcx] // name 1-8 bytes
- mov [rdx],rax
- add rcx,4
- add rdx,4
- mov rax,[rcx] // name 4-12 bytes
- mov [rdx],rax
- pop rdx
- pop rcx
- pop rax
- jmp Return
- NameTag:
- db 'JMS_v407.1'
- db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
- // 41 B8 0D 00 00 00 48 8B CE E8
- 1406D9D93:
- jmp Hook
- Return:
- [Disable]
- DeAlloc(Hook)
- 1406D9D93:
- mov r8d,0000000D
- mov rcx,rsi
- call 14090EDB0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement