have anybody see this script before?
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
00718725:
jmp newmem
nop
returnhere:
newmem:
originalcode:
xor ecx,ecx
mov [edx+64],ecx
mov ecx,[edx+64]
mov [eax+64],ecx
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
00718725: // 8B 4A 64 89 48 64 8D 4A 68 8B 39 8D 70 68 89 3E
mov ecx ,[edx+64]
mov [eax+64],ecx
I found at another hack Forum.
anyone see this before,please kindly advise
Thanks!!
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
00718725:
jmp newmem
nop
returnhere:
newmem:
originalcode:
xor ecx,ecx
mov [edx+64],ecx
mov ecx,[edx+64]
mov [eax+64],ecx
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
00718725: // 8B 4A 64 89 48 64 8D 4A 68 8B 39 8D 70 68 89 3E
mov ecx ,[edx+64]
mov [eax+64],ecx
I found at another hack Forum.
anyone see this before,please kindly advise
Thanks!!