agreed, I don't see any transmission code...
btw, help me understand the use of the DnsFree variable... why is it often exor'd with 0x23dc67e8? is that the addr of a routine and exor is faster than adding? thank you.
btw, help me understand the use of the DnsFree variable... why is it often exor'd with 0x23dc67e8? is that the addr of a routine and exor is faster than adding? thank you.
It get's XOR'd once after the GetProcAddress, then XOR'd back before the STDCALL invocation.
This is done for both the GetProcAddress calls, so I'm going to just guess that this is some anti-patching anti-cheat shenanigans.
http://www.reddit.com/r/GlobalOffensive/comments/1y0kc1/vac_...