From 041e2d5781133fd06e150a9a9fe93ac63decb23b Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Mon, 30 Sep 2019 08:22:20 +0200 Subject: Hunt TestDLL get and show IEntitySystem and ISystem --- TestDLL/dllmain.cpp | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'TestDLL/dllmain.cpp') diff --git a/TestDLL/dllmain.cpp b/TestDLL/dllmain.cpp index 2841415..0124c65 100644 --- a/TestDLL/dllmain.cpp +++ b/TestDLL/dllmain.cpp @@ -1,4 +1,5 @@ #include "stdafx.h" +#include "HuntClasses.h" #include #include @@ -203,8 +204,17 @@ void APIENTRY LibEntry(PVOID user_ptr) text.c_str(), "TestDLL Notification", MB_OK | MB_ICONINFORMATION); + + UINT64 pEntSys = (UINT64)user_ptr; + pEntSys = *(UINT64*)pEntSys; + + IEntitySystem * iEnt = *(IEntitySystem **)user_ptr; + char buf[128]; - snprintf(buf, sizeof buf, "_%s_\n", "bla"); + snprintf(buf, sizeof buf, "gEnv: %p | %p | %u | %u | %p | %p\n", user_ptr, + (PVOID)(*(UINT64*)(pEntSys + 104)), *(BOOL*)(pEntSys + 786974), + *(UINT32*)(pEntSys + 786970), (PVOID)(*(UINT64*)(pEntSys + 786962)), + iEnt->GetSystem()); MessageBoxA(NULL, buf, "TestDLL Notification", -- cgit v1.2.3