Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. General Programming
  3. C / C++ / MFC
  4. Hello about hooking this weird function any info is welcome

Hello about hooking this weird function any info is welcome

Scheduled Pinned Locked Moved C / C++ / MFC
5 Posts 2 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • N Offline
    N Offline
    nah1337
    wrote on last edited by
    #1

    the function looks excatly as the codeblock below like this : I suspect that the function is virtual or something very werid but can this function be hooked really interested to do that. I have hooked standard apis and other functions but hooking this i have no idea how do do it if anyone helps it BE great thx.

    char *__cdecl sub_1000F61C()
    {
    byte_10095AA0 = (unsigned __int8)byte_10090A14 ^ 0x62;
    byte_10095AA1 = (unsigned __int8)byte_10090A11 ^ 0x8F;
    byte_10095AA2 = (unsigned __int8)byte_10090A12 ^ 0xF;
    byte_10095AA3 = (unsigned __int8)byte_10090A10 ^ 0x19;
    byte_10095AA4 = (unsigned __int8)byte_10090A12 ^ 0xD;
    byte_10095AA5 = (unsigned __int8)byte_10090A10 ^ 0x1B;
    byte_10095AA6 = (unsigned __int8)byte_10090A14 ^ 0x3E;
    byte_10095AA8 = (unsigned __int8)byte_10090A10 ^ 0x59;
    byte_10095AA9 = (unsigned __int8)byte_10090A14 ^ 0x69;
    byte_10095AA7 = (unsigned __int8)byte_10090A10 ^ 0x45;
    byte_10095AAC = (unsigned __int8)byte_10090A13 ^ 0xE0;
    byte_10095AAA = (unsigned __int8)byte_10090A13 ^ 0x8C;
    byte_10095AAB = (unsigned __int8)byte_10090A11 ^ 0x93;
    dword_10095BA0 = 12;
    return &byte_10095AA0;
    }

    char byte_10095AA0 all the byte_andnumbers are declared as chars.

    CPalliniC 1 Reply Last reply
    0
    • N nah1337

      the function looks excatly as the codeblock below like this : I suspect that the function is virtual or something very werid but can this function be hooked really interested to do that. I have hooked standard apis and other functions but hooking this i have no idea how do do it if anyone helps it BE great thx.

      char *__cdecl sub_1000F61C()
      {
      byte_10095AA0 = (unsigned __int8)byte_10090A14 ^ 0x62;
      byte_10095AA1 = (unsigned __int8)byte_10090A11 ^ 0x8F;
      byte_10095AA2 = (unsigned __int8)byte_10090A12 ^ 0xF;
      byte_10095AA3 = (unsigned __int8)byte_10090A10 ^ 0x19;
      byte_10095AA4 = (unsigned __int8)byte_10090A12 ^ 0xD;
      byte_10095AA5 = (unsigned __int8)byte_10090A10 ^ 0x1B;
      byte_10095AA6 = (unsigned __int8)byte_10090A14 ^ 0x3E;
      byte_10095AA8 = (unsigned __int8)byte_10090A10 ^ 0x59;
      byte_10095AA9 = (unsigned __int8)byte_10090A14 ^ 0x69;
      byte_10095AA7 = (unsigned __int8)byte_10090A10 ^ 0x45;
      byte_10095AAC = (unsigned __int8)byte_10090A13 ^ 0xE0;
      byte_10095AAA = (unsigned __int8)byte_10090A13 ^ 0x8C;
      byte_10095AAB = (unsigned __int8)byte_10090A11 ^ 0x93;
      dword_10095BA0 = 12;
      return &byte_10095AA0;
      }

      char byte_10095AA0 all the byte_andnumbers are declared as chars.

      CPalliniC Online
      CPalliniC Online
      CPallini
      wrote on last edited by
      #2

      Uh, what do you want to do?

      If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler. -- Alfonso the Wise, 13th Century King of Castile.
      This is going on my arrogant assumptions. You may have a superb reason why I'm completely wrong. -- Iain Clarke
      [My articles]

      In testa che avete, signor di Ceprano?

      N 1 Reply Last reply
      0
      • CPalliniC CPallini

        Uh, what do you want to do?

        If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler. -- Alfonso the Wise, 13th Century King of Castile.
        This is going on my arrogant assumptions. You may have a superb reason why I'm completely wrong. -- Iain Clarke
        [My articles]

        N Offline
        N Offline
        nah1337
        wrote on last edited by
        #3

        I want hook the function char *__cdecl sub_1000F61C()

        char *__cdecl sub_1000F61C()
        {
        byte_10095AA0 = (unsigned __int8)byte_10090A14 ^ 0x62;
        byte_10095AA1 = (unsigned __int8)byte_10090A11 ^ 0x8F;
        byte_10095AA2 = (unsigned __int8)byte_10090A12 ^ 0xF;
        byte_10095AA3 = (unsigned __int8)byte_10090A10 ^ 0x19;
        byte_10095AA4 = (unsigned __int8)byte_10090A12 ^ 0xD;
        byte_10095AA5 = (unsigned __int8)byte_10090A10 ^ 0x1B;
        byte_10095AA6 = (unsigned __int8)byte_10090A14 ^ 0x3E;
        byte_10095AA8 = (unsigned __int8)byte_10090A10 ^ 0x59;
        byte_10095AA9 = (unsigned __int8)byte_10090A14 ^ 0x69;
        byte_10095AA7 = (unsigned __int8)byte_10090A10 ^ 0x45;
        byte_10095AAC = (unsigned __int8)byte_10090A13 ^ 0xE0;
        byte_10095AAA = (unsigned __int8)byte_10090A13 ^ 0x8C;
        byte_10095AAB = (unsigned __int8)byte_10090A11 ^ 0x93;
        dword_10095BA0 = 12;
        return &byte_10095AA0;
        }

        CPalliniC 1 Reply Last reply
        0
        • N nah1337

          I want hook the function char *__cdecl sub_1000F61C()

          char *__cdecl sub_1000F61C()
          {
          byte_10095AA0 = (unsigned __int8)byte_10090A14 ^ 0x62;
          byte_10095AA1 = (unsigned __int8)byte_10090A11 ^ 0x8F;
          byte_10095AA2 = (unsigned __int8)byte_10090A12 ^ 0xF;
          byte_10095AA3 = (unsigned __int8)byte_10090A10 ^ 0x19;
          byte_10095AA4 = (unsigned __int8)byte_10090A12 ^ 0xD;
          byte_10095AA5 = (unsigned __int8)byte_10090A10 ^ 0x1B;
          byte_10095AA6 = (unsigned __int8)byte_10090A14 ^ 0x3E;
          byte_10095AA8 = (unsigned __int8)byte_10090A10 ^ 0x59;
          byte_10095AA9 = (unsigned __int8)byte_10090A14 ^ 0x69;
          byte_10095AA7 = (unsigned __int8)byte_10090A10 ^ 0x45;
          byte_10095AAC = (unsigned __int8)byte_10090A13 ^ 0xE0;
          byte_10095AAA = (unsigned __int8)byte_10090A13 ^ 0x8C;
          byte_10095AAB = (unsigned __int8)byte_10090A11 ^ 0x93;
          dword_10095BA0 = 12;
          return &byte_10095AA0;
          }

          CPalliniC Online
          CPalliniC Online
          CPallini
          wrote on last edited by
          #4

          What do you mean with 'hook'? Since you have the source then you can make the intercepting code in place. :)

          If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler. -- Alfonso the Wise, 13th Century King of Castile.
          This is going on my arrogant assumptions. You may have a superb reason why I'm completely wrong. -- Iain Clarke
          [My articles]

          In testa che avete, signor di Ceprano?

          N 1 Reply Last reply
          0
          • CPalliniC CPallini

            What do you mean with 'hook'? Since you have the source then you can make the intercepting code in place. :)

            If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler. -- Alfonso the Wise, 13th Century King of Castile.
            This is going on my arrogant assumptions. You may have a superb reason why I'm completely wrong. -- Iain Clarke
            [My articles]

            N Offline
            N Offline
            nah1337
            wrote on last edited by
            #5

            Actually i dont have the source its from a dynamic dll and i decompiled te function using hexrayz so i just want to know how do declare it and i want to ook it usin detours i doubt it can be intercepted but can ya explaine more mybe example of intercepting this function

            1 Reply Last reply
            0
            Reply
            • Reply as topic
            Log in to reply
            • Oldest to Newest
            • Newest to Oldest
            • Most Votes


            • Login

            • Don't have an account? Register

            • Login or register to search.
            • First post
              Last post
            0
            • Categories
            • Recent
            • Tags
            • Popular
            • World
            • Users
            • Groups