Please.....?
Here's The script
Code: Select all
[ENABLE]
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
00531319:
jmp newmem
nop
returnhere:
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov edi,0
originalcode:
mov [ebp+000000c8],edi
exit:
jmp returnhere
[DISABLE]
dealloc(newman)
00531319:
mov [ebp+000000c8],edi
