//alloc(newmem,2048,"DiabloImmortal.exe"+3BE82A)
//alloc(newmem,2048,"DiabloImmortal.exe"+3C6AFA)
//alloc(newmem,2048,"DiabloImmortal.exe"+3C150A)
//alloc(newmem,2048,"DiabloImmortal.exe"+3C264A)
alloc(newmem,2048,"DiabloImmortal.exe"+436023)


label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
cmp byte ptr [r13+33],04
//jne 7FF654D12E34
//test byte ptr [r12+00000121],40  // cu test byte ptr [r12+0000011D],40 // cu test byte ptr [r12+00000115],40

//je 7FF654D13435
//mov rax,[7FF657F1BFC0]
cmp [rax+00000350],dil //cu cmp [rax+00000348],dil //cu cmp [rax+00000320],dil

// new func
cmp byte ptr [r13+33],04
//jne 7FF752E16033   > je 1 + 2 moi mat hinh
//cmp [rsi+45],bl
//je 7FF752E165D5    > jne 2 + 1 moi mat hinh
//mov r9,[rsi+000000B8]
//mov [rsp+00000138],r9
//test r9,r9




exit:
jmp returnhere



//"DiabloImmortal.exe"+3BE82A:
//"DiabloImmortal.exe"+3C6AFA:
//"DiabloImmortal.exe"+3C150A:
//"DiabloImmortal.exe"+3C264A:
"DiabloImmortal.exe"+436023:


jmp newmem
returnhere: