写个较通用的32位apihook函数免得每次都重写

最新推荐文章于 2022-05-21 23:34:56 发布

「已注销」

最新推荐文章于 2022-05-21 23:34:56 发布

阅读量1.4k

点赞数

分类专栏： Windows应用

本文链接：https://blog.csdn.net/kdebug/article/details/45821089

版权

Windows应用专栏收录该内容

7 篇文章 0 订阅

订阅专栏

typedef int(__stdcall *send_)(SOCKET , const char* , int , int );
typedef int(__stdcall *recv_)(SOCKET, const char*, int, int);
int __stdcall fake_send(SOCKET s, const char* buf, int len, int flags)
{
	return old_send(s, buf, len, flags);
}
int __stdcall fake_recv(SOCKET s, const char* buf, int len, int flags)
{
	int r = old_recv(s, buf, len, flags);
	return r;
}
void* hook_x86(const char* dll,const char* func,void* fake_addr)
{
	HINSTANCE hInst = ::GetModuleHandleA(dll);
	if (hInst == NULL)
		hInst = LoadLibraryA(dll);
	if (hInst == NULL)
		return NULL;
	char* p = (char*)::GetProcAddress(hInst, func);
	void* old = (void*)(p + 1);
	DWORD Old = 0;
	VirtualProtect(p - 10, 20, PAGE_EXECUTE_READWRITE, &Old);
	*p++ = 0xEB;
	*p = 0xF9;
	p -= 6;
	*p = 0xE9;
	DWORD* t = (DWORD*)++p;
	DWORD ta = (DWORD)fake_addr - ((DWORD)t - 1) - 5;
	*t = ta;
	VirtualProtect(p - 10, 20, Old, &Old);
	return old;
}
old_send = (send_)hook_x86("ws2_32.dll", "send", fake_send);
old_recv = (recv_)hook_x86("ws2_32.dll", "recv", fake_recv);

欢迎加QQ群：333483823进行技术讨论.