[原创]VS竞技游戏平台5.1.1去广告

核心代码 。。。CreateProcess的处理函数

void _declspec(naked) NewCreateProcess()

{

    _asm    mov eax,[esp+0x8];

    _asm    mov g_dwValue,eax;

    if(g_dwValue){

        OutputDebugStringA( (LPSTR)g_dwValue );

        if( strstr( (LPSTR) g_dwValue,"MicroDrwin.exe") ){

            _asm mov eax,1;

            _asm ret 0x28;

        }

        else if(strstr( (LPSTR) g_dwValue,"MicroPage.exe") ){

            _asm mov eax,1;

            _asm ret 0x28;

        }

        else if(strstr( (LPSTR) g_dwValue,"browser_launcher.exe") ){

            _asm mov eax,1;

            _asm ret 0x28;

        }

    }

    _asm    push ebp;

    _asm    mov ebp,esp;

    _asm    mov eax,g_dwFunAddr;

    _asm    add eax,5;

    _asm    jmp eax;

}

HOOK代码

    HMODULE hLib = LoadLibrary( _T("Kernel32.dll") );

    if ( NULL != hLib ){

        g_dwFunAddr=(DWORD) GetProcAddress( hLib,"CreateProcessA" );

        if(g_dwFunAddr)

        {

            OutputDebugStringA("准备Hook");

            InlineHook(g_dwFunAddr,NewCreateProcess);

        }

    }

上传的附件

VS平台去广告.zip