Function Exploit

HijackMethod/dllmain.cpp:309–360

}

void Exploit() {
    if (MH_Initialize() != MH_OK) {
        MessageBoxA(nullptr, "MH Init Error!", "ERROR", MB_ICONERROR | MB_OK);
        exit(1);
    }
    
    void* FileVerify_MainPointer = nullptr;
    if (OldQQ) 
    {
        FileVerify_MainPointer = static_cast<void*>(sig(GetModuleHandleA(NULL), Sig_text));
    }
    else
    {
        FileVerify_MainPointer = static_cast<void*>(sig(GetModuleHandleA("QQNT.dll"), Sig_text2));
    }

    HMODULE SelfModule = GetModuleHandleA("dbghelp.dll");
    MODULEINFO SelfModuleInfo = { 0 };
    GetModuleInformation(GetCurrentProcess(), SelfModule, &SelfModuleInfo, sizeof(SelfModuleInfo));
    
    if ((FileVerify_MainPointer >= SelfModule && FileVerify_MainPointer < SelfModule+SelfModuleInfo.SizeOfImage)) {
        MessageBoxA(nullptr, "Sig not found!", "ERROR", MB_ICONERROR | MB_OK);
        exit(1);
    }

    if (FileVerify_MainPointer != nullptr) {
        if (MH_CreateHook(FileVerify_MainPointer, &Hk_sub_7FF67F97A5A0, reinterpret_cast<LPVOID*>(&Org_sub_7FF67F97A5A0)) != MH_OK) {
            MessageBoxA(nullptr, "MH Hook Patch failed!", "ERROR", MB_ICONERROR | MB_OK);
            exit(1);
        }
    }
    else
    {
        MessageBoxA(nullptr, "Sig not found!", "ERROR", MB_ICONERROR | MB_OK);
        exit(1);
    }

    if (MH_CreateHook(&MessageBoxW, &Hk_MessageBoxW, reinterpret_cast<LPVOID*>(&Org_MessageBoxW)) != MH_OK) {
        MessageBoxA(nullptr, "MH Hook MessageBoxW failed!", "ERROR", MB_ICONERROR | MB_OK);
        exit(1);
    }
    
    if (MH_CreateHook(&CreateFileW, &Hk_CreateFileW, reinterpret_cast<LPVOID*>(&Org_CreateFileW)) != MH_OK) {
        MessageBoxA(nullptr, "MH Hook CreateFileW failed!", "ERROR", MB_ICONERROR | MB_OK);
        exit(1);
    }

    if (MH_EnableHook(MH_ALL_HOOKS)!=MH_OK) {
        MessageBoxA(nullptr, "MH enable all hooks failed!", "ERROR", MB_ICONERROR | MB_OK);
        exit(1);
    }
}

DWORD GetParentProcessID() {
    HANDLE hSnapshot;