InstallHookApi("ws2_32.dll", "send", (PVOID)mysend);


void RandomHDID()
{
	int i;
	for(i = 0; i < 20; i++)
	{
		hdid[i] = (BYTE)((WORD)GetRand() % 256);
	}
	MD5_CTX ctx;
	BYTE	buf[16] = {0};
	char	md5tmp[64] = {0};
	ctx.MD5Init();
	ctx.MD5Update(hdid, 20);
	ctx.MD5Final(buf);

	for(i = 0; i < 16; i ++)
	{
		wsprintfA(&md5tmp[i * 2], "%02X", buf[i]);
	}
	strcpy(rndxx, md5tmp);

	strcat(rndxx, "lykjLdy173");

	int len = strlen(rndxx);

	ctx.MD5Init();
	ctx.MD5Update((BYTE*)rndxx, len);
	ctx.MD5Final(buf);
	
	for(i = 0; i < 16; i ++)
	{
		wsprintfA(&md5tmp[i * 2], "%02X", buf[i]);
	}

	memcpy(&rndxx[32], md5tmp, 32);
	return ;
}

void xx(BYTE *pBuf, int size)
{
	//搜索 79 46 41 42 43 44
	BYTE	*pStart = (BYTE*)pBuf;
	for(int i = 0 ; i < size - 0x40; i ++)
	{
		if(pStart[i] == 0x79)
		{
			if(strncmp((char*)&pStart[i + 1], "FABCD", 5) == 0)
			{
				memcpy((char*)&pStart[i + 6], rndxx, 64);
			}
		}
	}
}

int WINAPI mysend(DWORD retaddr, __pfnsend pfnsend, IN SOCKET s, IN const char FAR * buf, IN int len, IN int flags)
{
	if(buf[0] == 0x39 && buf[1] == 0)
	{
		xx((BYTE*)buf, len);
	}
	return pfnsend(s, buf, len, flags);
}