Quote:
Originally posted by batmanbatman@Mar 24 2007, 01:13
awww gooDD (((((( they had put a protector on it.. cant disseble it with softice... any idea about how to intercept the return from windows libs to sv or countrymake?
|
Oh yes, I can't intercept call aslo but
Here is some guide and idea.
I'm working on newest one that release 23 March v1.03
Bot program working like set Hook to intercept when u press keyboard F11 by Set this function.
function SetWindowsHookExA(
idHook: Integer;
lpfn: TFNHookProc;
hmod: HINST;
dwThreadId: DWORD
):HHOOK;
When you exit bot it's will call unhook to exit program here is code for unhook.
function UnhookWindowsHookEx(
hhk: HHOOK
):BOOL;
In that code hook function TFNHookProc is address of procedure that will call when you press F11.
After you search in coding in dll. You will find some info when call this hook function.
there is 2 hook function call thread 1003ceeb and 1003dda0.
In old bot version it's not protect when you hook it's just call bot function.
Hope you get it.