|
发表于 2017-12-25 06:40:52
|
显示全部楼层
广西壮族自治区南宁市
- {
- DWORD 武器对象, 临时武器对像, Function, funcflag, 子弹数, time, Temp2;
- LPCVOID funcname;
- char Temp[64];
- 武器对象 = GetWeaponsAddress();
- 临时武器对像 = X86_Read_Int(Esp + 16);
- Function = X86_Read_Int(Esp + 4);
- funcflag = X86_Read_Int(Function + 172);
- Back = B零地址;
- if (无尽火力)
- {
- if (武器对象 == 临时武器对像 & Function != 0)
- {
- if (!IsBadReadPtr((PVOID)GetNameAddr(Function), 64))
- {
- RtlZeroMemory(&Temp, sizeof(Temp));
- RtlCopyMemory(&Temp, (PVOID)GetNameAddr(Function), 64);
- }
- if (UTF82WCS(Temp) != L"SetGunFlashLocation")
- {
- if (UTF82WCS(Temp) ==L"ServerFireAmmunition")
- {
- Back = C8地址;
- 子弹数 = X86_Read_Int(临时武器对像 + 720);
- 子弹数 = 子弹数 - 1;
- X86_Write_Int(临时武器对像 + 720, 子弹数, 4);
- return;
- }
- Temp2 = X86_Read_Int(Function + 200);
- if (Temp2 == 零十四地址)
- {
- Back = B零地址;
- X86_Write_Int(Esp + 28, funcflag, 4);
- return;
- }
- }
- if (UTF82WCS(Temp) ==L"SetGunFlashLocation")
- {
- X86_Write_Int(Esp + 24, 0, 4);
- time = timeGetTime();
- time = time - 总时钟;
- if (time + 1750 <= 0)
- {
- Back = C8地址;
- }
- else
- {
- 总时钟 = timeGetTime();
- Back = 五零地址;
- }
- }
- return;
- }
- }
- }
- extern "C" VOID __declspec(naked)SetFireCall(VOID)
- {
- __asm
- {
- pushad
- push esp
- call HookShoot;
- popad
- cmp word ptr[esi + 000000B0h], 0000h
- mov[ebp - 04h], 00000004h
- jmp Back
- }
- }
- VOID 秒杀段Hook()
- {
- BYTE 子弹拉回[] = { 144,144,144,144,144 };
- DWORD 劫持秒杀地址;
- 劫持秒杀地址 = 0x00492490;
- HOOK地址[0] = 劫持秒杀地址 + 1390;
- Back = HOOK地址[0] + 7;
- HOOK地址[1] = 劫持秒杀地址 + 654;
- B零地址 = HOOK地址[1] + 15;
- 五零地址 = HOOK地址[1] + 145;
- C8地址 = HOOK地址[1] + 92;
- 零十四地址 = 0x014F6700;
- 写_Byte(-1, 劫持秒杀地址 + 1569, 子弹拉回, 5);
- _Hook_Jmp(0x049271E, (DWORD)SetFireCall);
复制代码 |
|