alloc(newmem,2048)
newmem:
pushad
mov ecx,[4CA1714-8]
mov ecx,[ecx+20A028]//时间基址
mov ecx,[ecx+8C]
push -1
push -1
push 0
push 0
push 0
push 0
push 0
push 0//0是左1是右上是2下是3
mov eax,1538D60//过图CALL
call eax
popad
ret
[ENABLE]
CreateThread(newmem)
LdrInitializeThunk:
db 8B FF 55 8B EC
[DISABLE]
LdrInitializeThunk:
db 8B FF 55 8B EC
newmem:
pushad
mov ecx,[4CA1714-8]
mov ecx,[ecx+20A028]//时间基址
mov ecx,[ecx+8C]
push -1
push -1
push 0
push 0
push 0
push 0
push 0
push 0//0是左1是右上是2下是3
mov eax,1538D60//过图CALL
call eax
popad
ret
[ENABLE]
CreateThread(newmem)
LdrInitializeThunk:
db 8B FF 55 8B EC
[DISABLE]
LdrInitializeThunk:
db 8B FF 55 8B EC
