mireado

AOS binary pattern update

...@@ -10961,14 +10961,14 @@ bool InsertAOS1Hook() ...@@ -10961,14 +10961,14 @@ bool InsertAOS1Hook()
10961 ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range); 10961 ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range);
10962 //GROWL(reladdr); 10962 //GROWL(reladdr);
10963 if (!addr) { 10963 if (!addr) {
10964 - ConsoleOutput("vnreng:AOS: pattern not found"); 10964 + ConsoleOutput("vnreng:AOS1: pattern not found");
10965 return false; 10965 return false;
10966 } 10966 }
10967 addr += addr_offset; 10967 addr += addr_offset;
10968 //GROWL(addr); 10968 //GROWL(addr);
10969 enum { push_ecx = 0x51 }; // beginning of the function 10969 enum { push_ecx = 0x51 }; // beginning of the function
10970 if (*(BYTE *)addr != push_ecx) { 10970 if (*(BYTE *)addr != push_ecx) {
10971 - ConsoleOutput("vnreng:AOS: beginning of the function not found"); 10971 + ConsoleOutput("vnreng:AOS1: beginning of the function not found");
10972 return false; 10972 return false;
10973 } 10973 }
10974 10974
...@@ -10978,7 +10978,7 @@ bool InsertAOS1Hook() ...@@ -10978,7 +10978,7 @@ bool InsertAOS1Hook()
10978 hp.offset = 8; 10978 hp.offset = 8;
10979 hp.type = DATA_INDIRECT; 10979 hp.type = DATA_INDIRECT;
10980 10980
10981 - ConsoleOutput("vnreng: INSERT AOS"); 10981 + ConsoleOutput("vnreng: INSERT AOS1");
10982 NewHook(hp, "AOS"); 10982 NewHook(hp, "AOS");
10983 return true; 10983 return true;
10984 } 10984 }
...@@ -10990,7 +10990,7 @@ bool InsertAOS2Hook() ...@@ -10990,7 +10990,7 @@ bool InsertAOS2Hook()
10990 0x33,0xc0, // 00C4E7E1 |. 33C0 XOR EAX,EAX 10990 0x33,0xc0, // 00C4E7E1 |. 33C0 XOR EAX,EAX
10991 0x53, // 00C4E7E3 |. 53 PUSH EBX 10991 0x53, // 00C4E7E3 |. 53 PUSH EBX
10992 0x55, // 00C4E7E4 |. 55 PUSH EBP 10992 0x55, // 00C4E7E4 |. 55 PUSH EBP
10993 - 0x8b,0x2d, 0x40,0xa3,0xcf,0x00, // 00C4E7E5 |. 8B2D 40A3CF00 MOV EBP,DWORD PTR DS:[0CFA340] 10993 + 0x8b,0x2d, XX4, // 00C4E7E5 |. 8B2D 40A3CF00 MOV EBP,DWORD PTR DS:[0CFA340] ; mireado: some time changing 40A3CF00 => 40A3C000
10994 0x89,0x07, // 00C4E7EB |. 8907 MOV DWORD PTR DS:[EDI],EAX 10994 0x89,0x07, // 00C4E7EB |. 8907 MOV DWORD PTR DS:[EDI],EAX
10995 0x89,0x47, 0x04, // 00C4E7ED |. 8947 04 MOV DWORD PTR DS:[EDI+4],EAX 10995 0x89,0x47, 0x04, // 00C4E7ED |. 8947 04 MOV DWORD PTR DS:[EDI+4],EAX
10996 0x56, // 00C4E7F0 |. 56 PUSH ESI 10996 0x56, // 00C4E7F0 |. 56 PUSH ESI
...@@ -11002,14 +11002,14 @@ bool InsertAOS2Hook() ...@@ -11002,14 +11002,14 @@ bool InsertAOS2Hook()
11002 ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range); 11002 ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range);
11003 //GROWL(reladdr); 11003 //GROWL(reladdr);
11004 if (!addr) { 11004 if (!addr) {
11005 - ConsoleOutput("vnreng:AOS: pattern not found"); 11005 + ConsoleOutput("vnreng:AOS2: pattern not found");
11006 return false; 11006 return false;
11007 } 11007 }
11008 addr += addr_offset; 11008 addr += addr_offset;
11009 //GROWL(addr); 11009 //GROWL(addr);
11010 enum { push_ecx = 0x51 }; // beginning of the function 11010 enum { push_ecx = 0x51 }; // beginning of the function
11011 if (*(BYTE *)addr != push_ecx) { 11011 if (*(BYTE *)addr != push_ecx) {
11012 - ConsoleOutput("vnreng:AOS: beginning of the function not found"); 11012 + ConsoleOutput("vnreng:AOS2: beginning of the function not found");
11013 return false; 11013 return false;
11014 } 11014 }
11015 11015
......