Quote:
Originally Posted by Sh1Rum
i can give you pointer and offset of Room ID ;> when you want ..=D and the Adress for Room Password (String) the Adress has be change but i have found again :>
|
why not hook the function that reads from the adress of your pointer? if there is something like:
Code:
push eax
mov eax, [ebp+XX] // move in eax the value of the adress which ebp+XX contains
...
so you hook it easy like this (in C++ ofc):
Code:
u_long Adr = NULL;
_asm
{
push eax
mov Adr, ebp // moving adress
add Adr, XX // adding right offset
mov eax, [Adr] // 'Adr' holds the adress, so let it read the value of it
// jmp/ret - return to original code
}
so you dont need to research the pointer for every patch, just research the routine you hook (much faster and if you add a pattern scan you dont need to update any piece of source (if the bytes dont change on later updates))