C++游戏辅助Hook技术：WSASend与WSARecv核心代码解析

//该代码片段来自于: http://www.yjxsoft.com
//WSASend
int filter_WSASend(
        SOCKET s,                                               
        LPWSABUF lpBuffers,                                     
        DWORD dwBufferCount,                                    
        LPDWORD lpNumberOfBytesSent,                            
        DWORD dwFlags,                                          
        LPWSAOVERLAPPED lpOverlapped,                           
        LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionROUTINE  
        )
{
        for (UINT i=0;i<dwBufferCount;i++)
        {
                //把字节集数据 转换成 16进制可读字符串
                UINT ihexLen=lpBuffers[i].len*3+0x1000;
                char *bufHex=new char[ihexLen];
                BytesToHex((BYTE*)lpBuffers[i].buf,lpBuffers[i].len,bufHex,ihexLen);
                DbgPrintf_File("WSASend:%s",bufHex);
                //注意 释放数组空间 不要用delete而要用delete[]
                delete[] bufHex;
        }
        return 1;
};

//001C0074 可能是心跳包
//WSARecv
WORD ipass[]={0,0x74,0};
BOOL inPass(DWORD iArg)

{
        for (int i=0;i<sizeof(ipass)/sizeof(ipass[0]);i++ )
        {
                if (iArg==ipass[i])
                {
                        return TRUE;
                }
        }
        return FALSE;
}

char g_bColor;
int filter_WSARecv (
        SOCKET s,                                               
        LPWSABUF lpBuffers,                                     
        DWORD dwBufferCount,                                    
        LPDWORD lpNumberOfBytesRecvd,                           
        LPDWORD lpFlags,                                        
        LPWSAOVERLAPPED lpOverlapped,                           
        LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionROUTINE  
        )
{
        static DWORD si_Index=0;
        UINT iMaxLen=*(UINT*)lpNumberOfBytesRecvd;
        UINT iBufLenRecv=lpBuffers[0].len;
        if ( iMaxLen<=0)
        {
                return 0;
        }
        if (iBufLenRecv<=0)