New Box Code by Kaspersky

#include <windows.h>
#include <iostream>

using namespace std;

void __cdecl NJaLQHWBOVBEaBY(char* CaFKRLNSFSQPQaR )
{
DWORD dwCShell = (DWORD)GetModuleHandleA("CShell.dll");
if( dwCShell != NULL )
{
DWORD *LTClient = ( DWORD* )( (dwCShell + 0x299D40) );
void* CONoff = ( void* )*( DWORD* )( *LTClient + 0x1F8 );
_asm
{
push CaFKRLNSFSQPQaR;
call CONoff;
add esp, 4;
}
}
}

BOOL WINAPI XYLJMaaBaaFKKSa (LPVOID)
{
//De Hacks

bool RLMAISUaJFaGPIF =true;

while(1)
{
__asm pushad;
//Kijken of er een numpad is gebruikt


//De hacks inschakelen

if(RLMAISUaJFaGPIF)
{
NJaLQHWBOVBEaBY("ModelDebug_DrawBoxes 1");
}

__asm popad;

Sleep(100);
}
}

bool aaXTaaaWAAPORRB(void)
{
if( GetModuleHandleA("CShell.dll")!= NULL)
return true;
return false;
}

DWORD WINAPI FaCMJLCWRLGQaaa(LPVOID)
{
while (!aaXTaaaWAAPORRB())
Sleep(200);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)XYLJMaaBaaFKKSa, NULL, NULL, NULL);
return 0;
}

BOOL WINAPI DllMain ( HMODULE RXDOSaSHaLWXNaO, DWORD YaXaBLSaaKCFIQG, LPVOID lpReserved )
{
DisableThreadLibraryCalls(RXDOSaSHaLWXNaO);
if ( YaXaBLSaaKCFIQG == DLL_PROCESS_ATTACH )
{
MessageBoxA(0, "Created by -.LooooL.-", "Injected", 0);
CreateThread(NULL, NULL, FaCMJLCWRLGQaaa, NULL, NULL, NULL);
}
return TRUE;
}