[enable]
alloc(hook,128)
label(return)

crackme4.exe+105A:
db 66 0F 1F 44 00 00

crackme4.exe+1112:
db 66 0F 1F 44 00 00

hook:
cmp [esp],crackme4.exe+1050
jl KERNELBASE.VirtualQuery
cmp [esp],crackme4.exe+17A8
jg KERNELBASE.VirtualQuery
cmp [esp],crackme4.exe+1246
mov eax,[esp]
jl return
add eax,3

return:
add eax,1D
add esp,04
jmp eax

KERNEL32.VirtualQuery:
jmp hook

[disable]