TwMS v147.4_ICS_MobLR

//TwMS v147.4_ICS_MobLR
//Update:Onion

[Enable]
Alloc(MobLR, 128)
Alloc(LRControl, 04)
RegisterSymbol(LRControl)

LRControl:
DD 00

MobLR:
PUSH EBP
MOV EBP,ESP
SUB ESP,20
MOV EAX,[EBP+8]
PUSH EBX
PUSH ESI
MOV ESI,[00DB1F48]
MOV EBX,ECX
PUSH [LRControl]
POP [EBX+FC]
JMP 0094A976

00C32DF0:
DD MobLR

[Disable]
00C32DF0:
DD 0094A963
DeAlloc(MobLR)
DeAlloc(LRControl)
UnRegisterSymbol(LRControl)