All pastes #748783 Raw Edit

Stuff

public text v1 · immutable
#748783 ·published 2007-10-25 03:42 UTC
rendered paste body
;============================================
;HookPacketSent
;============================================
HookPacketSend  PROC
HookPacketS: 

;SET HOOK AT 0x7D5D6C
;REPLACE OVERWRITTEN FUNCTION
push r8
push rcx
mov rsi, r8
mov rbp, rdx
mov rdi, rcx
;push registers
pop rax
pop r8

;CUSTOM CODE
lea rcx, [r8] 
lea rdx, [rax] 
call SendPacket

;JUMP BACK TO EXIT POINT
;USE RCX - IT IS OVERWRITTEN ON EVERY PATH
mov rax, 7D5D75h 
;JMP TO PROPER LOCATION
jmp rax

HookPacketSend  ENDP