All pastes #748795 Raw Edit

Stuff

public text v1 · immutable
#748795 ·published 2007-10-25 04:00 UTC
rendered paste body
;============================================
;HookPacketSent
;============================================
HookPacketSend  PROC
HookPacketS: 

;SET HOOK AT 0x7D5D6C
;REPLACE OVERWRITTEN FUNCTION
;Preserve Registers
push rcx
push rdx
push r8
push r9
push r10
push r11

;CUSTOM CODE
lea rcx, [r8] 
lea rdx, [rax] 
call SendPacket

;Restore registers
pop r11
pop r10
pop r9
pop r8
pop rdx
pop rcx

;Return to normal execution
mov rsi, r8
mov rbp, rdx

;JUMP BACK TO EXIT POINT
;USE RCX - IT IS OVERWRITTEN ON EVERY PATH
mov rax, 7D5D75h 
;JMP TO PROPER LOCATION
jmp rax

HookPacketSend  ENDP