Showing
1 changed file
with
6 additions
and
6 deletions
... | @@ -10961,14 +10961,14 @@ bool InsertAOS1Hook() | ... | @@ -10961,14 +10961,14 @@ bool InsertAOS1Hook() |
10961 | ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range); | 10961 | ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range); |
10962 | //GROWL(reladdr); | 10962 | //GROWL(reladdr); |
10963 | if (!addr) { | 10963 | if (!addr) { |
10964 | - ConsoleOutput("vnreng:AOS: pattern not found"); | 10964 | + ConsoleOutput("vnreng:AOS1: pattern not found"); |
10965 | return false; | 10965 | return false; |
10966 | } | 10966 | } |
10967 | addr += addr_offset; | 10967 | addr += addr_offset; |
10968 | //GROWL(addr); | 10968 | //GROWL(addr); |
10969 | enum { push_ecx = 0x51 }; // beginning of the function | 10969 | enum { push_ecx = 0x51 }; // beginning of the function |
10970 | if (*(BYTE *)addr != push_ecx) { | 10970 | if (*(BYTE *)addr != push_ecx) { |
10971 | - ConsoleOutput("vnreng:AOS: beginning of the function not found"); | 10971 | + ConsoleOutput("vnreng:AOS1: beginning of the function not found"); |
10972 | return false; | 10972 | return false; |
10973 | } | 10973 | } |
10974 | 10974 | ||
... | @@ -10978,7 +10978,7 @@ bool InsertAOS1Hook() | ... | @@ -10978,7 +10978,7 @@ bool InsertAOS1Hook() |
10978 | hp.offset = 8; | 10978 | hp.offset = 8; |
10979 | hp.type = DATA_INDIRECT; | 10979 | hp.type = DATA_INDIRECT; |
10980 | 10980 | ||
10981 | - ConsoleOutput("vnreng: INSERT AOS"); | 10981 | + ConsoleOutput("vnreng: INSERT AOS1"); |
10982 | NewHook(hp, "AOS"); | 10982 | NewHook(hp, "AOS"); |
10983 | return true; | 10983 | return true; |
10984 | } | 10984 | } |
... | @@ -10990,7 +10990,7 @@ bool InsertAOS2Hook() | ... | @@ -10990,7 +10990,7 @@ bool InsertAOS2Hook() |
10990 | 0x33,0xc0, // 00C4E7E1 |. 33C0 XOR EAX,EAX | 10990 | 0x33,0xc0, // 00C4E7E1 |. 33C0 XOR EAX,EAX |
10991 | 0x53, // 00C4E7E3 |. 53 PUSH EBX | 10991 | 0x53, // 00C4E7E3 |. 53 PUSH EBX |
10992 | 0x55, // 00C4E7E4 |. 55 PUSH EBP | 10992 | 0x55, // 00C4E7E4 |. 55 PUSH EBP |
10993 | - 0x8b,0x2d, 0x40,0xa3,0xcf,0x00, // 00C4E7E5 |. 8B2D 40A3CF00 MOV EBP,DWORD PTR DS:[0CFA340] | 10993 | + 0x8b,0x2d, XX4, // 00C4E7E5 |. 8B2D 40A3CF00 MOV EBP,DWORD PTR DS:[0CFA340] ; mireado: some time changing 40A3CF00 => 40A3C000 |
10994 | 0x89,0x07, // 00C4E7EB |. 8907 MOV DWORD PTR DS:[EDI],EAX | 10994 | 0x89,0x07, // 00C4E7EB |. 8907 MOV DWORD PTR DS:[EDI],EAX |
10995 | 0x89,0x47, 0x04, // 00C4E7ED |. 8947 04 MOV DWORD PTR DS:[EDI+4],EAX | 10995 | 0x89,0x47, 0x04, // 00C4E7ED |. 8947 04 MOV DWORD PTR DS:[EDI+4],EAX |
10996 | 0x56, // 00C4E7F0 |. 56 PUSH ESI | 10996 | 0x56, // 00C4E7F0 |. 56 PUSH ESI |
... | @@ -11002,14 +11002,14 @@ bool InsertAOS2Hook() | ... | @@ -11002,14 +11002,14 @@ bool InsertAOS2Hook() |
11002 | ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range); | 11002 | ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), module_base_, module_base_ + range); |
11003 | //GROWL(reladdr); | 11003 | //GROWL(reladdr); |
11004 | if (!addr) { | 11004 | if (!addr) { |
11005 | - ConsoleOutput("vnreng:AOS: pattern not found"); | 11005 | + ConsoleOutput("vnreng:AOS2: pattern not found"); |
11006 | return false; | 11006 | return false; |
11007 | } | 11007 | } |
11008 | addr += addr_offset; | 11008 | addr += addr_offset; |
11009 | //GROWL(addr); | 11009 | //GROWL(addr); |
11010 | enum { push_ecx = 0x51 }; // beginning of the function | 11010 | enum { push_ecx = 0x51 }; // beginning of the function |
11011 | if (*(BYTE *)addr != push_ecx) { | 11011 | if (*(BYTE *)addr != push_ecx) { |
11012 | - ConsoleOutput("vnreng:AOS: beginning of the function not found"); | 11012 | + ConsoleOutput("vnreng:AOS2: beginning of the function not found"); |
11013 | return false; | 11013 | return false; |
11014 | } | 11014 | } |
11015 | 11015 | ... | ... |
-
Please register or login to post a comment