From a61bd93a9d1b3df3859aea761d59564749eff440 Mon Sep 17 00:00:00 2001 From: Quentin Dufour Date: Thu, 19 Oct 2017 20:16:46 +0200 Subject: [PATCH] It works ;p --- Observer/dllmain.cpp | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/Observer/dllmain.cpp b/Observer/dllmain.cpp index 6fbb987..afd827c 100644 --- a/Observer/dllmain.cpp +++ b/Observer/dllmain.cpp @@ -31,10 +31,6 @@ __declspec(naked) void TrampolineLogMessageWrapperHook() { __asm { - // Overwrited instructions by the patch - PUSH esi - PUSH [esp+0xC] // push [esp + 4 + messageLength] - // Save registers PUSHAD @@ -44,7 +40,12 @@ __declspec(naked) void TrampolineLogMessageWrapperHook() // Restore registers POPAD - // Not really sure... + // Overwrited instructions by the patch + PUSH esi + PUSH[esp + 0xC] // push [esp + 4 + messageLength] + + // Jump back to the function... + PUSH 0x403b75 RET } }