植树节活动——滴水连环CT

aobscan(wxsd,8B 85 68 FF FF FF 8B 88 A0 00 00 00)

[ENABLE]

alloc(newmem,2048)

label(returnhere)

label(originalcode)

label(exit)

newmem:

mov ecx,#100

originalcode:

mov [eax+000000A0],ecx

exit:

jmp returnhere

wxsd+f:

jmp newmem

nop

returnhere:

[DISABLE]

dealloc(newmem)

wxsd+f:

mov [eax+000000A0],ecx