Advertisement
Riremito

v407.1 Name Change

Aug 10th, 2022
210
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.63 KB | None | 0 0
  1. // JMS v407.1
  2. // Name Tag
  3. [Enable]
  4. Alloc(Hook, 512)
  5. Label(Return)
  6. Label(NameTag)
  7.  
  8. Hook:
  9. push rdx
  10. sub rsp,20
  11. mov r8d,0000000D
  12. mov rcx,rsi
  13. call 14090EDB0 // DecodeBuffer
  14. add rsp,20
  15. pop rdx
  16. push rax
  17. push rcx
  18. push rdx
  19. lea rcx,[NameTag]
  20. mov rax,[rcx] // name 1-8 bytes
  21. mov [rdx],rax
  22. add rcx,4
  23. add rdx,4
  24. mov rax,[rcx] // name 4-12 bytes
  25. mov [rdx],rax
  26. pop rdx
  27. pop rcx
  28. pop rax
  29. jmp Return
  30.  
  31. NameTag:
  32. db 'JMS_v407.1'
  33. db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  34.  
  35. // 41 B8 0D 00 00 00 48 8B CE E8
  36. 1406D9D93:
  37. jmp Hook
  38. Return:
  39.  
  40. [Disable]
  41. DeAlloc(Hook)
  42.  
  43. 1406D9D93:
  44. mov r8d,0000000D
  45. mov rcx,rsi
  46. call 14090EDB0
  47.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement