This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import idaapi | |
import idautils | |
import ida_funcs | |
import ida_allins | |
import ida_ua | |
import ctypes as C | |
NETNODE_NAME = '$ClassInformer_node' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include <WindowsConstants.au3> | |
#include <WinAPI.au3> | |
#include <WinAPIConstants.au3> | |
Global $hWnd = WinGetHandle('[CLASS:ArenaNet_Dx_Window_Class;REGEXPTITLE:^\D+$]') | |
ConsoleWrite('@@ Debug(' & @ScriptLineNumber & ') : $hWnd = ' & $hWnd & @CRLF & '>Error code: ' & @error & @CRLF) ;### Debug Console | |
Global $iProc = WinGetProcess($hWnd) | |
ConsoleWrite('@@ Debug(' & @ScriptLineNumber & ') : $iProc = ' & $iProc & @CRLF & '>Error code: ' & @error & @CRLF) ;### Debug Console | |
Global $hProc = _GWMA_OpenProcess($iProc) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#pragma once | |
#define WIN32_LEAN_AND_MEAN | |
#include <Windows.h> | |
// At least 12 bytes required for this jump | |
void* Detour64(void* source, void* destination, DWORD64 length) { | |
DWORD dwOld; | |
//mov rax,0xABABABABABABABAB | |
//jmp rax |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include <stdio.h> | |
#include <stdlib.h> | |
typedef struct _link_mvmt { | |
int offset; | |
char name[20]; | |
} link_mvmt; | |
link_mvmt possible_movements[] = { | |
{32767, "180 TURN"}, |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include <Windows.h> | |
#include <stdio.h> | |
#define GWML_NO_DATFIX 1 | |
#define GWML_KEEP_SUSPENDED 2 | |
#define ERROR(msg) { printf("ERROR: "##msg##"\n"); return FALSE; } | |
#define ASSERT(action) if(!(##action##)) ERROR( #action ) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include "ModuleReloader.h" | |
typedef HMODULE (WINAPI *LoadLibraryW_t)( | |
_In_ LPCWSTR lpFileName | |
); | |
typedef VOID (WINAPI *Sleep_t)( | |
_In_ DWORD dwMilliseconds | |
); | |