x64 Dll + Asm + NT Api hook VC++ sample code

kkmomo

Tested for TwMs 241.1 MapleStory.exe
全部5個檔案，下面直接貼 source ，不另附檔案下載

範例中數據皆取自本站的 新 楓之谷(MapleStory) 遊戲代碼分享區

檔案列表:
Assembly.asm
dllmain.cpp
X64AsmSample.sln
X64AsmSample.vcxproj
X64AsmSample.vcxproj.filters

此範例實作:
1. CRC bypass (沒用到 asm)
    注入 dll 後直接寫入

2. Boss 無敵 Asm + 開關
    預設為關
    call SetBossInvincibleEnable(BOOLEAN Enable) 設定開/關

3. 全職業攻擊技能無延遲 Asm + 開關
    預設為關,速度5
    call SetAttackNoDelay(BOOLEAN Enable)  設定開/關
    call SetAttackNoDelayValue(DWORD Value) 設定速度

4. Nt Api Hook Asm + hook function
    以 Hook NtQuerySystemInformation 為例
    當 SystemInformationClass == SystemProcessInformation 時
    印出 pid 跟 process image name

Assembly.asm

1. ; ASSEMBLE CODE
   
2. 
   
3. ; Exportation
   
4. PUBLIC BossInvincible
   
5. PUBLIC AttackNoDelay
   
6. PUBLIC NtQuerySystemInformation_Orig
   
7. 
   
8. 
   
9. ; Importation
   
10. EXTERN g_controlData_Enable_BossInvincible:QWORD
    
11. EXTERN g_controlData_Enable_NoDelay:QWORD
    
12. EXTERN g_controlData_NoDelayValue:QWORD
    
13. 
    
14. ; Declaration
    
15. .DATA
    
16. g_noDelayCount DB 00H
    
17. 
    
18. 
    
19. ; Implementation
    
20. .CODE
    
21. 
    
22. BossInvincible PROC
    
23.   mov rcx, [g_controlData_Enable_BossInvincible]
    
24.   cmp byte ptr [rcx], 01H
    
25.   je BossInvincible_Enable
    
26.   mov rcx, 140531EC0H
    
27.   push rcx
    
28.   mov ecx, [rcx+00000850H]
    
29.   ret
    
30. BossInvincible_Enable:
    
31.   mov eax,01H
    
32.   ret
    
33. BossInvincible ENDP
    
34. 
    
35. AttackNoDelay PROC
    
36.   mov rcx, [g_controlData_Enable_NoDelay]
    
37.   cmp byte ptr [rcx], 01H
    
38.   jne AttackNoDelay_Orig
    
39.   mov rcx, [g_controlData_NoDelayValue]
    
40.   mov al, byte ptr [rcx]
    
41.   cmp byte ptr [g_noDelayCount], al
    
42.   jae AttackNoDelay_Orig
    
43.   inc byte ptr [g_noDelayCount]
    
44.   jmp SkipSetAction
    
45. AttackNoDelay_Orig:
    
46.   mov byte ptr [g_noDelayCount], 0
    
47.   mov [rsi+00000864H],r13d
    
48. SkipSetAction:
    
49.   mov rax,[r14]
    
50.   mov [rsp+20H],ebx
    
51.   mov rcx,1434F9CD7H
    
52.   jmp rcx
    
53. AttackNoDelay ENDP
    
54. 
    
55. NtQuerySystemInformation_Orig PROC
    
56.   mov r10,rcx
    
57.   mov eax,00000036H
    
58.   syscall
    
59.   ret
    
60. NtQuerySystemInformation_Orig ENDP
    
61. 
    
62. END

複製代碼

dllmain.cpp

1. #define WIN32_LEAN_AND_MEAN             // Exclude rarely-used stuff from windows headers
   
2. // Windows Header Files
   
3. #define WIN32_NO_STATUS
   
4. #include <windows.h>
   
5. #undef WIN32_NO_STATUS
   
6. #include <ntstatus.h>
   
7. #include <shlwapi.h>
   
8. #include <winternl.h>
   
9. #include <tchar.h>
   
10. #include <stdio.h>
    
11. 
    
12. #pragma comment(lib, "Shlwapi.lib")
    
13. 
    
14. #define _DEBUG_TAG_ L"sample"
    
15. #define _FMT_PREFIX_ _DEBUG_TAG_ L": %s L%d "
    
16. #define _FMT_NEWLINE_ L"\r\n"
    
17. #define my_log(fmt, ...) mylog(_FMT_PREFIX_ _T(fmt) _FMT_NEWLINE_, __FUNCTIONW__, __LINE__, __VA_ARGS__)
    
18. #define TARGET_PROCESS_NAME L"MapleStory.exe"
    
19. 
    
20. #ifndef RtlOffsetToPointer
    
21. #define RtlOffsetToPointer(B,O)  ((PCHAR)( ((PCHAR)(B)) + ((ULONG_PTR)(O))  ))
    
22. #endif
    
23. 
    
24. typedef struct _SYSTEM_PROCESS_INFO
    
25. {
    
26.     ULONG                   NextEntryOffset;
    
27.     ULONG                   NumberOfThreads;
    
28.     LARGE_INTEGER           Reserved[3];
    
29.     LARGE_INTEGER           CreateTime;
    
30.     LARGE_INTEGER           UserTime;
    
31.     LARGE_INTEGER           KernelTime;
    
32.     UNICODE_STRING          ImageName;
    
33.     ULONG                   BasePriority;
    
34.     HANDLE                  ProcessId;
    
35.     HANDLE                  InheritedFromProcessId;
    
36. } SYSTEM_PROCESS_INFO, * PSYSTEM_PROCESS_INFO;
    
37. 
    
38. struct CONTROL_DATA
    
39. {
    
40.     BOOLEAN Enable_BossInvincible;
    
41.     BOOLEAN Enable_NoDelay;
    
42.     DWORD NoDelayValue;
    
43. };
    
44. 
    
45. CONTROL_DATA g_controlData{ 0 };
    
46. 
    
47. typedef union tagpfnNtQuerySystemInformation {
    
48.     NTSTATUS(NTAPI* func_ptr)(
    
49.         IN      SYSTEM_INFORMATION_CLASS SystemInformationClass,
    
50.         IN OUT  PVOID SystemInformation,
    
51.         IN      ULONG SystemInformationLength,
    
52.         OUT     PULONG ReturnLength OPTIONAL
    
53.         );
    
54. } pfnNtQuerySystemInformation;
    
55. 
    
56. pfnNtQuerySystemInformation pNtQuerySystemInformation = { 0 };
    
57. 
    
58. void mylog(LPCWSTR Format, ...)
    
59. {
    
60.     WCHAR buf[1024] = L"";
    
61.     va_list args;
    
62.     va_start(args, Format);
    
63.     vswprintf_s(buf, _countof(buf), Format, args);
    
64.     OutputDebugStringW(buf);
    
65.     va_end(args);
    
66. }
    
67. 
    
68. NTSTATUS NtQuerySystemInformation_Hook(
    
69.     SYSTEM_INFORMATION_CLASS SystemInformationClass,
    
70.     PVOID SystemInformation,
    
71.     ULONG SystemInformationLength,
    
72.     PULONG ReturnLength)
    
73. {
    
74.     NTSTATUS Status;
    
75.     PSYSTEM_PROCESS_INFO SystemProcess;
    
76.     PSYSTEM_PROCESS_INFO NextSystemProcess;
    
77.     Status = pNtQuerySystemInformation.func_ptr(SystemInformationClass, SystemInformation, SystemInformationLength, ReturnLength);
    
78.     if (NT_SUCCESS(Status) && SystemInformationClass == SystemProcessInformation)
    
79.     {
    
80.         SystemProcess = (PSYSTEM_PROCESS_INFO)SystemInformation;
    
81.         NextSystemProcess = (PSYSTEM_PROCESS_INFO)((PBYTE)SystemProcess + SystemProcess->NextEntryOffset);
    
82.         my_log("Query ProcessId=%llu ImageName=%wZ", NextSystemProcess->ProcessId, &NextSystemProcess->ImageName);
    
83.     }
    
84.     return Status;
    
85. }
    
86. 
    
87. extern "C"
    
88. {
    
89.     DWORD64 g_controlData_Enable_BossInvincible = 0;
    
90.     DWORD64 g_controlData_Enable_NoDelay = 0;
    
91.     DWORD64 g_controlData_NoDelayValue = 0;
    
92. 
    
93.     void BossInvincible();
    
94.     void AttackNoDelay();
    
95.     NTSTATUS NtQuerySystemInformation_Orig(
    
96.         SYSTEM_INFORMATION_CLASS SystemInformationClass,
    
97.         PVOID SystemInformation,
    
98.         ULONG SystemInformationLength,
    
99.         PULONG ReturnLength);
    
100. }
     
101. 
     
102. void WriteMem(const DWORD64 lpAddress, PBYTE Buffer, unsigned Length)
     
103. {
     
104.     BOOL res;
     
105.     DWORD OldProtection;
     
106.     res = VirtualProtect((LPVOID)lpAddress, Length, PAGE_EXECUTE_READWRITE, &OldProtection);
     
107.     if (res == TRUE)
     
108.     {
     
109.         memcpy((LPBYTE)lpAddress, Buffer, Length);
     
110.         res = VirtualProtect((LPVOID)lpAddress, Length, OldProtection, &OldProtection);
     
111.         if (res != TRUE)
     
112.         {
     
113.             my_log("Restore mem protect fail %lu", GetLastError());
     
114.         }
     
115.     }
     
116.     else
     
117.     {
     
118.         my_log("Set mem protect fail %lu", GetLastError());
     
119.     }
     
120. }
     
121. 
     
122. void AsmJumpFar(const DWORD64 lpAddress, LPCVOID Function, SIZE_T Nops)
     
123. {
     
124.     DWORD OldProtection;
     
125.     VirtualProtect((LPVOID)lpAddress, 14ULL + Nops, PAGE_EXECUTE_READWRITE, &OldProtection);
     
126.     *(LPWORD)lpAddress = 0x25FFU;
     
127.     *(PDWORD)(lpAddress + 2) = 0;
     
128.     *(PDWORD64)(lpAddress + 6) = (DWORD64)Function;
     
129.     if (!!Nops)
     
130.     {
     
131.         memset(((LPBYTE)lpAddress + 14), 0x90, Nops);
     
132.     }
     
133.     VirtualProtect((LPVOID)lpAddress, 14ULL + Nops, OldProtection, &OldProtection);
     
134. }
     
135. 
     
136. void SetBossInvincibleEnable(BOOLEAN Enable)
     
137. {
     
138.     g_controlData.Enable_BossInvincible = Enable;
     
139. }
     
140. 
     
141. void SetAttackNoDelay(BOOLEAN Enable)
     
142. {
     
143.     g_controlData.Enable_NoDelay = Enable;
     
144. }
     
145. 
     
146. void SetAttackNoDelayValue(DWORD Value)
     
147. {
     
148.     g_controlData.NoDelayValue = Value;
     
149. }
     
150. 
     
151. void MyRoutine()
     
152. {
     
153.     g_controlData_Enable_BossInvincible = (DWORD64)RtlOffsetToPointer(&g_controlData, FIELD_OFFSET(CONTROL_DATA, Enable_BossInvincible));
     
154.     g_controlData_Enable_NoDelay = (DWORD64)RtlOffsetToPointer(&g_controlData, FIELD_OFFSET(CONTROL_DATA, Enable_NoDelay));
     
155.     g_controlData_NoDelayValue = (DWORD64)RtlOffsetToPointer(&g_controlData, FIELD_OFFSET(CONTROL_DATA, NoDelayValue));
     
156.    
     
157.     HMODULE ntdll = GetModuleHandleA("ntdll.dll");
     
158.     if (ntdll)
     
159.     {
     
160.         DWORD64 NtQuerySystemInformation_Addr = (DWORD64)GetProcAddress(ntdll, "NtQuerySystemInformation");
     
161.         *(DWORD64*)(&pNtQuerySystemInformation) = (DWORD64)NtQuerySystemInformation_Orig;
     
162.         my_log("NtQuerySystemInformation_Addr=%p", NtQuerySystemInformation_Addr);
     
163.         AsmJumpFar(NtQuerySystemInformation_Addr, NtQuerySystemInformation_Hook, 2);
     
164.     }
     
165.     else
     
166.     {
     
167.         my_log("Get ntdll module handle fail %lu", GetLastError());
     
168.     }
     
169. 
     
170.     BYTE bypassPatch[] =
     
171.     {
     
172.         //xor eax,eax
     
173.         0x31, 0xC0,
     
174.         //ret
     
175.         0xC3,
     
176.         // nops
     
177.         0x90, 0x90
     
178.     };
     
179.     DWORD64 function_addr = 0x143B7E0E0U;
     
180.     WriteMem(function_addr, bypassPatch, sizeof(bypassPatch));
     
181.     AsmJumpFar(0x141B01AD0U, BossInvincible, 0);
     
182.     AsmJumpFar(0x1434F9CC9U, AttackNoDelay, 0);
     
183.     SetAttackNoDelayValue(5);
     
184.     SetBossInvincibleEnable(FALSE);
     
185.     SetAttackNoDelay(FALSE);
     
186. }
     
187. 
     
188. BOOL APIENTRY DllMain( HMODULE hModule,
     
189.                        DWORD  ul_reason_for_call,
     
190.                        LPVOID lpReserved
     
191.                      )
     
192. {
     
193.     DWORD len;
     
194.     WCHAR processName[MAX_PATH] = { 0 };
     
195. 
     
196.     switch (ul_reason_for_call)
     
197.     {
     
198.     case DLL_PROCESS_ATTACH:
     
199.         len = GetModuleFileNameW(GetModuleHandleA(NULL), processName, MAX_PATH);
     
200.         if (len > 0)
     
201.         {
     
202.             if (StrStrW(processName, TARGET_PROCESS_NAME))
     
203.             {
     
204.                 my_log("CreateThread");
     
205.                 CreateThread(0, 0, (LPTHREAD_START_ROUTINE)MyRoutine, 0, 0, 0);
     
206.             }
     
207.         }
     
208.         else
     
209.         {
     
210.             my_log("Get moudle file name fail %lu.", GetLastError());
     
211.         }
     
212.         break;
     
213.     case DLL_PROCESS_DETACH:
     
214.         FreeLibrary(hModule);
     
215.         break;
     
216.     }
     
217.     return TRUE;
     
218. }

複製代碼

X64AsmSample.sln

1. Microsoft Visual Studio Solution File, Format Version 12.00
   
2. # Visual Studio Version 16
   
3. VisualStudioVersion = 16.0.31911.196
   
4. MinimumVisualStudioVersion = 10.0.40219.1
   
5. Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "X64AsmSample", "X64AsmSample.vcxproj", "{BE72125F-805E-4DF1-B8BE-80DFC1C1AA83}"
   
6. EndProject
   
7. Global
   
8.         GlobalSection(SolutionConfigurationPlatforms) = preSolution
   
9.                 Debug|x64 = Debug|x64
   
10.                 Release|x64 = Release|x64
    
11.         EndGlobalSection
    
12.         GlobalSection(ProjectConfigurationPlatforms) = postSolution
    
13.                 {BE72125F-805E-4DF1-B8BE-80DFC1C1AA83}.Debug|x64.ActiveCfg = Debug|x64
    
14.                 {BE72125F-805E-4DF1-B8BE-80DFC1C1AA83}.Debug|x64.Build.0 = Debug|x64
    
15.                 {BE72125F-805E-4DF1-B8BE-80DFC1C1AA83}.Release|x64.ActiveCfg = Release|x64
    
16.                 {BE72125F-805E-4DF1-B8BE-80DFC1C1AA83}.Release|x64.Build.0 = Release|x64
    
17.         EndGlobalSection
    
18.         GlobalSection(SolutionProperties) = preSolution
    
19.                 HideSolutionNode = FALSE
    
20.         EndGlobalSection
    
21.         GlobalSection(ExtensibilityGlobals) = postSolution
    
22.                 SolutionGuid = {CB2CD138-098F-465E-A9B3-17033E4BA7F0}
    
23.         EndGlobalSection
    
24. EndGlobal

複製代碼

X64AsmSample.vcxproj

1. <?xml version="1.0" encoding="utf-8"?>
   
2. <Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   
3.   <ItemGroup Label="ProjectConfigurations">
   
4.     <ProjectConfiguration Include="Debug|x64">
   
5.       <Configuration>Debug</Configuration>
   
6.       <Platform>x64</Platform>
   
7.     </ProjectConfiguration>
   
8.     <ProjectConfiguration Include="Release|x64">
   
9.       <Configuration>Release</Configuration>
   
10.       <Platform>x64</Platform>
    
11.     </ProjectConfiguration>
    
12.   </ItemGroup>
    
13.   <PropertyGroup Label="Globals">
    
14.     <VCProjectVersion>16.0</VCProjectVersion>
    
15.     <Keyword>Win32Proj</Keyword>
    
16.     <ProjectGuid>{be72125f-805e-4df1-b8be-80dfc1c1aa83}</ProjectGuid>
    
17.     <RootNamespace>X64AsmSample</RootNamespace>
    
18.     <WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
    
19.   </PropertyGroup>
    
20.   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
    
21.   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
    
22.     <ConfigurationType>DynamicLibrary</ConfigurationType>
    
23.     <UseDebugLibraries>true</UseDebugLibraries>
    
24.     <PlatformToolset>v142</PlatformToolset>
    
25.     <CharacterSet>Unicode</CharacterSet>
    
26.   </PropertyGroup>
    
27.   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
    
28.     <ConfigurationType>DynamicLibrary</ConfigurationType>
    
29.     <UseDebugLibraries>false</UseDebugLibraries>
    
30.     <PlatformToolset>v142</PlatformToolset>
    
31.     <WholeProgramOptimization>true</WholeProgramOptimization>
    
32.     <CharacterSet>Unicode</CharacterSet>
    
33.   </PropertyGroup>
    
34.   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
    
35.   <ImportGroup Label="ExtensionSettings">
    
36.     <Import Project="$(VCTargetsPath)\BuildCustomizations\masm.props" />
    
37.   </ImportGroup>
    
38.   <ImportGroup Label="Shared">
    
39.   </ImportGroup>
    
40.   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
    
41.     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
    
42.   </ImportGroup>
    
43.   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
    
44.     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
    
45.   </ImportGroup>
    
46.   <PropertyGroup Label="UserMacros" />
    
47.   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
    
48.     <LinkIncremental>true</LinkIncremental>
    
49.   </PropertyGroup>
    
50.   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
    
51.     <LinkIncremental>false</LinkIncremental>
    
52.   </PropertyGroup>
    
53.   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
    
54.     <ClCompile>
    
55.       <WarningLevel>Level3</WarningLevel>
    
56.       <SDLCheck>true</SDLCheck>
    
57.       <PreprocessorDefinitions>_DEBUG;X64ASMSAMPLE_EXPORTS;_WINDOWS;_USRDLL;%(PreprocessorDefinitions)</PreprocessorDefinitions>
    
58.       <ConformanceMode>true</ConformanceMode>
    
59.       <PrecompiledHeader>NotUsing</PrecompiledHeader>
    
60.       <PrecompiledHeaderFile>pch.h</PrecompiledHeaderFile>
    
61.     </ClCompile>
    
62.     <Link>
    
63.       <SubSystem>Windows</SubSystem>
    
64.       <GenerateDebugInformation>true</GenerateDebugInformation>
    
65.       <EnableUAC>false</EnableUAC>
    
66.     </Link>
    
67.   </ItemDefinitionGroup>
    
68.   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
    
69.     <ClCompile>
    
70.       <WarningLevel>Level3</WarningLevel>
    
71.       <FunctionLevelLinking>true</FunctionLevelLinking>
    
72.       <IntrinsicFunctions>true</IntrinsicFunctions>
    
73.       <SDLCheck>true</SDLCheck>
    
74.       <PreprocessorDefinitions>NDEBUG;X64ASMSAMPLE_EXPORTS;_WINDOWS;_USRDLL;%(PreprocessorDefinitions)</PreprocessorDefinitions>
    
75.       <ConformanceMode>true</ConformanceMode>
    
76.       <PrecompiledHeader>NotUsing</PrecompiledHeader>
    
77.       <PrecompiledHeaderFile>pch.h</PrecompiledHeaderFile>
    
78.     </ClCompile>
    
79.     <Link>
    
80.       <SubSystem>Windows</SubSystem>
    
81.       <EnableCOMDATFolding>true</EnableCOMDATFolding>
    
82.       <OptimizeReferences>true</OptimizeReferences>
    
83.       <GenerateDebugInformation>true</GenerateDebugInformation>
    
84.       <EnableUAC>false</EnableUAC>
    
85.     </Link>
    
86.   </ItemDefinitionGroup>
    
87.   <ItemGroup>
    
88.     <ClCompile Include="dllmain.cpp" />
    
89.   </ItemGroup>
    
90.   <ItemGroup>
    
91.     <MASM Include="Assembly.asm">
    
92.       <FileType>Document</FileType>
    
93.     </MASM>
    
94.   </ItemGroup>
    
95.   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
    
96.   <ImportGroup Label="ExtensionTargets">
    
97.     <Import Project="$(VCTargetsPath)\BuildCustomizations\masm.targets" />
    
98.   </ImportGroup>
    
99. </Project>

複製代碼

X64AsmSample.vcxproj.filters

1. <?xml version="1.0" encoding="utf-8"?>
   
2. <Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   
3.   <ItemGroup>
   
4.     <Filter Include="Source Files">
   
5.       <UniqueIdentifier>{4FC737F1-C7A5-4376-A066-2A32D752A2FF}</UniqueIdentifier>
   
6.       <Extensions>cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx</Extensions>
   
7.     </Filter>
   
8.     <Filter Include="Header Files">
   
9.       <UniqueIdentifier>{93995380-89BD-4b04-88EB-625FBE52EBFB}</UniqueIdentifier>
   
10.       <Extensions>h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd</Extensions>
    
11.     </Filter>
    
12.     <Filter Include="Resource Files">
    
13.       <UniqueIdentifier>{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}</UniqueIdentifier>
    
14.       <Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms</Extensions>
    
15.     </Filter>
    
16.   </ItemGroup>
    
17.   <ItemGroup>
    
18.     <ClCompile Include="dllmain.cpp">
    
19.       <Filter>Source Files</Filter>
    
20.     </ClCompile>
    
21.   </ItemGroup>
    
22.   <ItemGroup>
    
23.     <MASM Include="Assembly.asm">
    
24.       <Filter>Source Files</Filter>
    
25.     </MASM>
    
26.   </ItemGroup>
    
27. </Project>

複製代碼

廖信翔

請問大大怎麼使用
不懂 嗚嗚

xlChen

太强了

依然卡卡

大大 其他数据怎么改

molina1026

謝謝大大用心推!

sky40112

請問這是需要使用DLL注入的方式嗎?
DLL注入會失敗
目前可以編譯完成，但不知道要怎麼使用

strays

建議 使用intel c++

sky40112

strays 發表於 2022-3-21 13:42
建議 使用intel c++

怎麼說呢?? 是有比較好debug 還是說有其方便之處
平常都是用visual studio 寫 C++ & C#
VSC++ 加入 masm 不是也可以編寫嗎?

strays

測試下intel c++

Happy0626

還是看不懂 求高手來個教學

huhai122

太专业了.有点弄不来怎么玩

Torin

sky40112 發表於 2022-3-21 17:20
怎麼說呢?? 是有比較好debug 還是說有其方便之處
平常都是用visual studio 寫 C++ & C#
VSC++ 加入 masm  ...

inline asm 方便

t812206236

1. #define FIELD_OFFSET(type, field)    ((LONG)(LONG_PTR)&(((type *)0)->field))

複製代碼

令人眼前一亮

PS2GUARD

感謝分享

ysl86294

實用