[Zeex_]

I believe it's possible to invoke the assembly code easier with sysreq.d (same as sysreq.c but takes an address instead of an index).

I've made a few changes to your code to make use of sysreq.d

http://pastebin.com/Lb4bp7d6

but it crashes at the VirtualProtect call:

Code:

0203B2D8  call        dword ptr ds:[1000703Ch] // the addres looks weird

Also I found that the original code crashes for me at the same place...

Any ideas?