豆角的道馆vlog
Open in Telegram
عزيزي مدير فريق telegram : مرحبا ! قناة https://t.me/xinhen5201314 إذا كان لديك أي معلومات أخرى عن هذا الموضوع الرجاء إضافته مجانا . ونحن سوف تلتزم دائما منصة القواعد ، شكرا لك على التعامل العادل !
Show more572
Subscribers
+324 hours
+177 days
+4830 days
Posts Archive
572
int64 fastcall (*oGetAndroidSOVersion)(int64, int64, int64, int64, int64, int64);
int64 fastcall hGetAndroidSOVersion(int64 a1, int64 a2, int64 a3, int64 a4, int64 a5, int64 a6) {
_QWORD v2;
__int64 result;
v2 = a5;
a5 = a3;
if (a2) *(_QWORD *)(a2 + 0x20) = a4;
result = 0x40;
if (a5) *(_DWORD *)a5 = (int32_t)result;
return result;
}
572
int64 (*osub_3A564C)(int64 a1, int64 a2, int64 a3, int64 a4, int64 a5, int64 a6, int64 a7, int64 a8, int64 a9, __int64 a10);
int64 hsub_3A564C(int64 a1, int64 a2, int64 a3, int64 a4, int64 a5, int64 a6, int64 a7, int64 a8, int64 a9, __int64 a10)
{
if (!a1) {
return 0;
}
unsigned char state = *(_BYTE *)(a1 + 0x61);
if (state == 1) {
__int64 result = osub_3A564C(a1, a2, a3, a4, a5, a6, a7, a8, a9, a10);
if (result != a1) {
*(_BYTE *)(a1 + 0x61) = 1;
return a1;
}
return result;
}
if (state == 2) {
__int64 result = osub_3A564C(a1, a2, a3, a4, a5, a6, a7, a8, a9, a10);
if (result != a1) {
*(_BYTE *)(a1 + 0x61) = 1;
return a1;
}
return result;
}
return a1;
}
关于虚表的完美处理钩子
572
写入D类(anogs+0x1DC798, -763363328);
写入D类(anogs+0x1DEFF0, -698416192);
写入D类(anogs+0x213F88, -721215457);
写入D类(anogs+0x2142E0, -698416192);
写入D类(anogs+0x21AFA0, -721215457);
写入D类(anogs+0x227080, -1440807968);
写入D类(anogs+0x2CA7C4, -1440807968);
写入D类(anogs+0x2D62D0, -698416192);
写入D类(anogs+0x2F4F30, -721215457);
写入D类(anogs+0x33054C, -721215457);
写入D类(anogs+0x3424C0, -698416192);
写入D类(anogs+0x342598, -721215457);
写入D类(anogs+0x3AFF1C, -721215457);
写入D类(anogs+0x3DFAE0, 943720076);
写入D类(anogs+0x468D58, -721215457);
写入D类(anogs+0x49AA48, 943719433);
写入D类(anogs+0x4DF084, -763363296);
写入D类(anogs+0x4F32D8, 335544352);
写入D类(anogs+0x4F33B8, 335544352);
写入D类(anogs+0x51FA8C, -698416192);
写入D类(anogs+0x5201FC, -698416192);
572
--mmap防追封
local t = {"libanogs.so"}
local tt = {0x46ED10}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "~A8 B [PC,#0x114]", false)
local tt = {0x46EBDC}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "~A8 NOP", false)572
PATCH_LIB("libanogs.so", "0xA32B0", "C0 03 5F D6");//ida [1]
PATCH_LIB("libanogs.so", "0xA3AF8", "1F 20 03 D5");//ida [2]
PATCH_LIB("libanogs.so", "0xA42D8", "C0 03 5F D6");//ida [3]
PATCH_LIB("libanogs.so", "0xA4608", "E0 03 1F 2A");//ida [4]
PATCH_LIB("libanogs.so", "0xA4650", "E0 03 1F 2A");//ida [5]
572
Repost from N/a
float __fastcall hook_sub_A18322C(float x)
{
auto ret = reinterpret_cast<uintptr_t>(__builtin_return_address(0));
DWORD Addr = ret - libUE4;
if (Addr == 0x16B548C Addr == 0xA18322C Addr == 0x1FC0364)
{
return x - 0.5f / 100.0f;
}
return floorf(x);//
}
HOOK_LIB_NO_ORIG("libUE4.so", "0xA18322C", hook_sub_A18322C); // Fix Stuck
搬运不带频道死全家频道 https://t.me/LBNZYFX
过imgui卡加载
572
PATCH_LIB("libanogs.so", "0x31CC48", "20 00 80 D2 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x2902BC", "00 00 80 D2 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x478FD8", "C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x3763C4", "C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x4C0F30", "00 00 80 D2 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x5195B0", "00 00 80 52 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x5195F4", "00 00 80 52 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x5195FC", "00 00 80 52 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x519644", "00 00 80 52 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x5196F0", "00 00 80 52 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x1CAEF4", "00 00 80 D2 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x2A50DC", "00 00 80 D2 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x3B6FD4", "00 00 80 D2 C0 03 5F D6");
PATCH_LIB("libanogs.so", "0x3B7038", "00 00 80 D2 C0 03 5F D6");
