{
    "name"      : "JoiningThink",
    "class"     : "CBasePlayer",
    "library"   : "mod",
    "identifiers":
    [
        {
            "os"    : "windows",
            "mod"   : "cstrike",
            "value" : [0x83,"*","*",0x53,0x55,0x56,0x8B,"*",0x33,0xDB,0x57,0x8B,"*","*","*","*","*",0x83,"*","*",0x0F]
        }, 
        {
            "os"    : "linux",
            "mod"   : "cstrike",
            "value" : "JoiningThink__11CBasePlayer"
        }
    ]
}

 53 56 8B ? 33 DB 8B ? ? 89 ? ? ? ? ? 8B