Injection

[yangc10]

Not sure if this is what you call - injection opcode/asm code. Does anybody know how to replace

mov eax,[esi+00005560]

with

mov eax,[esi+00005560]
mov [esi+00005560],000270f

temporary while the process is running?

[alpines]

Sure, allocate new space in the RAM for the program.
Replace your line with a jump to that new spot.
Execute the command which was replaces with the jump, execute the function you want to execute and finally jump back to the old position + 1.

That's called Detouring, Hooking. I think AutoIt even has an UDF for that but it's much easier in other languages I guess.

[yangc10]

do you know of any example for other language?

[alpines]

MS Detours for example provides a solid library to detour functions to execute commands at your will. Simply search for some tutorials, you can find some here too.

[Shadow992]

Take a look at this udf:

[yangc10]

Liked that but tut isn't english...

[Shadow992]

Originally Posted by yangc10

Liked that but tut isn't english...

You should be able tounderstand UDF by having a look at the udf itself and the example script.