[Ksbunker]

frit0!

Good to see you're still floating around.

Nice help, as always.

Regarding the hardcoding of the prologue "mov edi, edi; push ebp; mov ebp, esp"... some systems and service packs have different prologues so it's probably not the best idea to hardcode it in.

But don't worry easy fix.

Just read the first 5 bytes of the orig function. Save somewhere. Then when unhooking, re-write the original bytes back. That way you know it's gonna match.