alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:

// DiabloImmortal.exe dectect process playing now

cmp edx,01 // 0x0 Engine PLAY sang
jne if00
cmp [esi+0],69676E45 // 0x0 Engine
jne if00
cmp [esi+4],422F656E // 0x4 ne/Binaries
jne if00
cmp [esi+16],62616944 // 0x0 DiabloImmortal.exe
jne if00
cmp [esi+16+4],6D496F6C // 0x4 DiabloImmortal.exe
jne if00
cmp [esi+16+8],74726F6D // 0x8 DiabloImmortal.exe
jne if00
mov [esi+16+A],39397472 // DiabloImmortal.exe  >  DiabloImmort99.exe
if00:


movdqu xmm1,[esi+10]



exit:
jmp returnhere

"Agent.exe"+3BD334:
jmp newmem
returnhere: