Register Reader


最近論壇有很多有技術的文章,雖然我知道這邊發沒多少人會看...
增加流量得發一些"實用"的東西,像是免費外掛T^T

  1. //Register Reader
  2. //Author: Onion
  3. [Enable]
  4. RegisterSymbol(Values)
  5. Alloc(HookValue, 512)
  6. Label(Values)
  7. Label(Back)

  8. HookValue:
  9. Pushad        //EAX,ECX,EDX,EBX,ESP,EBP,ESI,EDI
  10. Pop [Values+00]
  11. Pop [Values+04]
  12. Pop [Values+08]
  13. Pop [Values+0C]
  14. Pop [Values+10]
  15. Pop [Values+14]
  16. Pop [Values+18]
  17. Pop [Values+1C]
  18. Push [Esp]
  19. Pop  [Values+20]
  20. DB 8B C1 83 20 00        //Original AoBs
  21. Jmp Back
  22. Values:
  23. DB 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


  24. 00401000:
  25. Jmp HookValue
  26. //Nop
  27. Back:
  28. [Disable]
  29. 00401000:
  30. DB 8B C1 83 20 00        //Original AoBs
  31. DeAlloc(HookValue)

留言

張貼留言

本月最夯