All pastes #748787 Raw Edit

Stuff

public text v1 · immutable
#748787 ·published 2007-10-25 03:49 UTC
rendered paste body
;============================================
;HookPacketSent
;============================================
HookPacketSend  PROC
HookPacketS: 

;SET HOOK AT 0x7D5D6C
;REPLACE OVERWRITTEN FUNCTION
;Preserve Registers
push r8
push rcx

;CUSTOM CODE
lea rcx, [r8] 
lea rdx, [rax] 
call SendPacket

;Restore registers
pop rax
pop r8

;Return to normal execution
mov rsi, r8
mov rbp, rdx

;JUMP BACK TO EXIT POINT
;USE RCX - IT IS OVERWRITTEN ON EVERY PATH
mov rax, 7D5D75h 
;JMP TO PROPER LOCATION
jmp rax

HookPacketSend  ENDP