rendered paste body@@77E38098 >-E9 FC8F5C88 JMP detour_e.00401099
77E3809D 90 NOP
77E3809E 90 NOP
77E3809F 90 NOP
77E380A0 90 NOP
77E380A1 90 NOP
77E380A2 90 NOP
77E380A3 0F85 940E0100 JNZ user32.77E48F3D
77E380A9 6A 00 PUSH 0
77E380AB FF75 14 PUSH DWORD PTR SS:[EBP+14]
77E380AE FF75 10 PUSH DWORD PTR SS:[EBP+10]
77E380B1 FF75 0C PUSH DWORD PTR SS:[EBP+C]
77E380B4 FF75 08 PUSH DWORD PTR SS:[EBP+8]
77E380B7 E8 04000000 CALL user32.MessageBoxExA
77E380BC C9 LEAVE
77E380BD C2 1000 RETN 10
77E380C0 > 55 PUSH EBP
77E380C1 8BEC MOV EBP,ESP
77E380C3 51 PUSH ECX
77E380C4 51 PUSH ECX
77E380C5 53 PUSH EBX
77E380C6 56 PUSH ESI
77E380C7 57 PUSH EDI
77E380C8 33FF XOR EDI,EDI
77E380CA 83CE FF OR ESI,FFFFFFFF
77E380CD 397D 0C CMP DWORD PTR SS:[EBP+C],EDI
77E380D0 897D FC MOV DWORD PTR SS:[EBP-4],EDI
77E380D3 897D F8 MOV DWORD PTR SS:[EBP-8],EDI
77E380D6 74 19 JE SHORT user32.77E380F1
77E380D8 6A 01 PUSH 1
77E380DA 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
77E380DD 56 PUSH ESI
77E380DE 50 PUSH EAX
77E380DF 56 PUSH ESI
77E380E0 FF75 0C PUSH DWORD PTR SS:[EBP+C]
77E380E3 57 PUSH EDI
77E380E4 E8 19A2FFFF CALL user32.MBToWCSEx
77E380E9 85C0 TEST EAX,EAX
77E380EB 0F84 71120100 JE user32.77E49362
77E380F1 397D 10 CMP DWORD PTR SS:[EBP+10],EDI
77E380F4 74 19 JE SHORT user32.77E3810F
77E380F6 6A 01 PUSH 1
77E380F8 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8]
77E380FB 56 PUSH ESI
77E380FC 50 PUSH EAX
77E380FD 56 PUSH ESI
77E380FE FF75 10 PUSH DWORD PTR SS:[EBP+10]
77E38101 57 PUSH EDI
77E38102 E8 FBA1FFFF CALL user32.MBToWCSEx
77E38107 85C0 TEST EAX,EAX
77E38109 0F84 43120100 JE user32.77E49352
77E3810F 393D 3892E677 CMP DWORD PTR DS:[77E69238],EDI
77E38115 0F85 4E120100 JNZ user32.77E49369
77E3811B FF75 18 PUSH DWORD PTR SS:[EBP+18]
77E3811E FF75 14 PUSH DWORD PTR SS:[EBP+14]
77E38121 FF75 F8 PUSH DWORD PTR SS:[EBP-8]
77E38124 FF75 FC PUSH DWORD PTR SS:[EBP-4]
77E38127 FF75 08 PUSH DWORD PTR SS:[EBP+8]
77E3812A E8 5D3FFFFF CALL user32.MessageBoxExW
77E3812F FF75 FC PUSH DWORD PTR SS:[EBP-4]
77E38132 8B35 C012E177 MOV ESI,DWORD PTR DS:[<&KERNEL32.HeapFre>; ntdll.RtlFreeHeap
77E38138 8BD8 MOV EBX,EAX
77E3813A 57 PUSH EDI
77E3813B FF35 9C91E677 PUSH DWORD PTR DS:[77E6919C]
77E38141 FFD6 CALL ESI
77E38143 397D F8 CMP DWORD PTR SS:[EBP-8],EDI
77E38146 74 0C JE SHORT user32.77E38154
77E38148 FF75 F8 PUSH DWORD PTR SS:[EBP-8]
77E3814B 57 PUSH EDI
77E3814C FF35 9C91E677 PUSH DWORD PTR DS:[77E6919C]
77E38152 FFD6 CALL ESI
77E38154 8BC3 MOV EAX,EBX
77E38156 5F POP EDI
77E38157 5E POP ESI
77E38158 5B POP EBX
77E38159 C9 LEAVE
77E3815A C2 1400 RETN 14
77E3815D 55 PUSH EBP
77E3815E 8BEC MOV EBP,ESP
77E38160 51 PUSH ECX
77E38161 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8]
77E38164 53 PUSH EBX
77E38165 56 PUSH ESI
77E38166 57 PUSH EDI
77E38167 B2 02 MOV DL,2
77E38169 E8 7AAEFDFF CALL user32.77E12FE8
77E3816E 85C0 TEST EAX,EAX
77E38170 8945 08 MOV DWORD PTR SS:[EBP+8],EAX
77E38173 0F84 C05C0100 JE user32.77E4DE39