Code:
[ENABLE] alloc(newmem,1024) label(returnhere) label(originalcode) label(exit) 006b0855: //Updated by seph. jmp newmem nop returnhere: newmem: originalcode: xor ecx,ecx mov [edx+64],ecx mov ecx,[edx+64] mov [eax+64],ecx exit: jmp returnhere [DISABLE] dealloc(newmem) 006b0855: mov ecx ,[edx+64] mov [eax+64],ecx
No timetick (Sum)
Code:
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(set0)
label(set1)
label(set2)
label(set3)
00657663: //Updated by seph.
jmp newmem
nop
nop
returnhere:
newmem:
//darkavatar
cmp [EDX+ECX*4+00000898],000007d0
je set2
cmp [EDX+ECX*4+00000898],000005dc
je set0
//Palpus
cmp [EDX+ECX*4+00000898],00000898
je set2
cmp [EDX+ECX*4+00000898],000003e8
je set0
//orginal
MOV EAX,[EDX+ECX*4+00000898]
jmp returnhere
set3:
MOV [EDX+ECX*4+00000898],00000003
MOV EAX,[EDX+ECX*4+00000898]
jmp returnhere
set1:
MOV [EDX+ECX*4+00000898],00000001
MOV EAX,[EDX+ECX*4+00000898]
jmp returnhere
set2:
MOV [EDX+ECX*4+00000898],00000002
MOV EAX,[EDX+ECX*4+00000898]
jmp returnhere
set0:
MOV [EDX+ECX*4+00000898],00000000
MOV EAX,[EDX+ECX*4+00000898]
jmp returnhere
[DISABLE]
dealloc(newmem)
00657663: //This is the address, you need to update it
MOV EAX,[EDX+ECX*4+00000898]






