[DISABLE]
define(RWJZ,629B3C8)
define(SFCALL,21DF080)
define(JNCALL,2346200)
LdrInitializeThunk:
db 8B FF 55 8B EC
400CE0:
mov eax,[RWJZ]
push 0
push 0
push 0
push #9999999999
push #109004887
push eax
mov edi,SFCALL
mov eax,edi
call eax
add esp,#24
ret
new_hook:
pushad
cmp [RWJZ],esi
jne new_hook_fanhui
cmp [ecx+8],#109004887
jne new_hook_fanhui
mov [ecx+60],(float)88
new_hook_fanhui:
popad
push ebp
mov ebp,esp
sub esp,70
jmp JNCALL+6
[ENABLE]
JNCALL:
jmp new_hook
createthread(400CE0)
[DISABLE]
</AssemblerScript>