[ENABLE] alloc(newmem,2048) alloc(blaaaa,3670018) label(originalcode) loadbinary(blaaaa,v44.CEM) newmem: cmp ecx,00400000 jb originalcode cmp ecx,00780000 ja originalcode mov eax,blaaaa sub eax,00400000 add ecx, eax originalcode: mov eax,[ebp+10] push esi push edi jmp 45de2c 0046C3E1: jmp newmem [disable] 0046C3E1: mov eax,[ebp+10] push esi push edi dealloc(newmem) dealloc(blaaaa)