- UID
- 119417
- 帖子
- 10954
- 主題
- 4278
- 精華
- 0
- 積分
- 5349
- 楓幣
- 13324
- 威望
- 5253
- 存款
- 70
- 贊助金額
- 0
- 推廣
- 0
- GP
- 2481
- 閱讀權限
- 150
- 性別
- 保密
- 在線時間
- 1927 小時
- 註冊時間
- 2015-10-18
- 最後登入
- 2024-11-8
|
大大
[ENABLE]
// TwMS 202.1 Hook Recv Packet
// Author : t4si
// Blog : https://blog.tasi.tw
Alloc(InterlockedIncrementHook, 256)
Label(HookESP)
Alloc(HookRecv, 512)
Label(GetPacket)
Label(Lab1)
Label(Lab2)
RegisterSymbol(HookRecv)
RegisterSymbol(pPacket)
RegisterSymbol(nPcket)
Alloc(pPacket, 4)
Alloc(nPcket, 4)
InterlockedIncrementHook:
cmp [esp], 006AA957
je HookESP
cmp [esp], 006AA96E
je HookESP
cmp [esp], 006AA97D
je HookESP
jmp InterlockedIncrement
HookESP:
Mov [Esp+1C],HookRecv
jmp InterlockedIncrement
HookRecv:
mov [ebp-28],eax
push 00
mov ecx,[ebp-24]
call 00B33520
test eax,eax
je Lab1
mov ecx,[ebp-14]
add ecx,40
call 00B345F0
Lab1:
cmp dword ptr [ebp-28],00
jle Lab2
cmp dword ptr [ebp-2C],00
jg Lab2
mov eax,[ebp-14]
mov ecx,[eax+00000090]
push ecx
mov ecx,[ebp-14]
add ecx,68
call 00B33F90
movzx edx,ax
cmp edx,0000FF35
je Lab3
jmp 00B2F0DA // Skip
Lab3: // 00B2F0E9
mov ecx,[ebp-14]
add ecx,68
call 00B340F0
cmp eax,00040000
jna Lab2
jmp 00B2F0FB // Skip
Lab2: // 00B2F107
cmp dword ptr [ebp-28],02
jne 00B2F173 // back Loop
mov eax,[ebp-14]
add eax,68
push eax
lea ecx,[ebp-48]
call 006AA570 // CInPacket::CInPacket
mov [ebp-04],00000000
mov ecx,[ebp-18]
push ecx
mov edx,[ebp-14]
mov eax,[edx+00000090]
push eax
lea ecx,[ebp-48]
call 006AA9A0 // CInPacket:ecryptData
lea ecx,[ebp-48]
call GetPacket
jmp 00B2F139 // Skipped
GetPacket:
push esi
mov esi, [ecx+8]
add esi, 4 // packet data
mov [pPacket], esi
mov esi, [ecx+c]
sub esi, 4
mov [nPcket], esi
pop esi
jmp 00B2F139
02A0F158:
DD InterlockedIncrementHook
[DISABLE]
02A0F158:
DD InterlockedIncrement
Dealloc(InterlockedIncrementHook)
Dealloc(HookRecv)
Dealloc(pPacket)
Dealloc(nPacket) 我不確定我這樣更新隊ㄟ 我不道怎麼測是@@ |
|