Elite Diviner
- Joined
- Jan 20, 2009
- Messages
- 420
- Reaction score
- 77
hmm theunknownguy my friend you are crazy good coder i see but i dont know how to do that thats why i am asking ^^
Join our community of MMO enthusiasts and game developers! By registering, you'll gain access to discussions on the latest developments in MMO server files and collaborate with like-minded individuals. Join us today and unlock the potential of MMO server development!
Join Today!hmm theunknownguy my friend you are crazy good coder i see but i dont know how to do that thats why i am asking ^^
CheckByIAT Proc pITD:DWord
Local pINT:DWord
Local pIAT:DWord
Local TotalAPIsFound:Dword
Assume Eax:Ptr IMAGE_IMPORT_DESCRIPTOR
Assume Edx:Ptr IMAGE_IMPORT_BY_NAME
Assume Ebx:Ptr MAP_MODULEINFO
.Repeat
Mov Eax, pITD
Mov Eax, [Eax].OriginalFirstThunk
Mov Edx, [Eax].FirstThunk
.If (Eax == 0)
Jmp @End
.EndIf
Mov pINT, Eax
Mov pIAT, Edx
Lea Esi, Offset APIDetectList
.Repeat
Mov Eax, pINT
.If (DWord Ptr [Eax] == 0)
.Break
.EndIf
Mov Edx, [Eax]
Add Edx, pModule
Push Edx
Invoke szCmp, [Edx].Name1, Esi
Pop Edx
.If (Eax != 0)
Add TotalAPIsFound, 1
.EndIf
Add Esi, AlignString
Add pIAT, DWord
Add pINT, DWord
.Until (Eax == -1)
Add pITD, SizeOf IMAGE_IMPORT_DESCRIPTOR
Mov Eax, pITD
.Until ([Eax].OriginalFirstThunk == 0)
Mov Eax, 1
@End:
Assume Eax:Nothing
Assume Edx:Nothing
Ret
CheckByIAT EndP
two FeN$x???)))
Please, some mirror, i need this.