[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem:
originalcode:
mov ecx,#31/4化
push ecx
push edx
lea ecx,[ebp-0000011C]
exit:
jmp returnhere
"dnf.exe"+11CD882:
jmp newmem
nop
nop
nop
returnhere:
[DISABLE]
dealloc(newmem)
"dnf.exe"+11CD882:
push ecx
push edx
lea ecx,[ebp-0000011C]
//Alt: db 51 52 8D 8D E4 FE FF FF

lea ecx,[ebp-0000011C]
exit:
jmp returnhere
"dnf.exe"+11CD882:
这些是啥