植樹節活動——滴水連環CT

aobscan(wxsd,8B 85 68 FF FF FF 8B 88 A0 00 00 00)

[ENABLE]

alloc(newmem,2048)

label(returnhere)

label(originalcode)

label(exit)

newmem:

mov ecx,#100

originalcode:

mov [eax+000000A0],ecx

exit:

jmp returnhere

wxsd+f:

jmp newmem

nop

returnhere:

[DISABLE]

dealloc(newmem)

wxsd+f:

mov [eax+000000A0],ecx

隨便看看 更多