inline hook

最新推荐文章于 2024-08-16 09:05:21 发布

ICode_Ya

最新推荐文章于 2024-08-16 09:05:21 发布

阅读量134

点赞数

分类专栏： Hook

本文链接：https://blog.csdn.net/weixin_37632683/article/details/108419786

版权

Hook 专栏收录该内容

2 篇文章 0 订阅

订阅专栏

原理: JMP后的偏移量 =目标地址 – 原地址 - 5

#include "stdafx.h"
#include "MyHook.h"
#include <iostream>

using namespace std;

void MyPint()
{
	cout << "test" << endl;
}
void MyPint2()
{
	cout << "test2" << endl;
}
int _tmain(int argc, _TCHAR* argv[])
{
	PROC pMyPint1 = (PROC)MyPint;
	PROC pMyPint2 = (PROC)MyPint2;
	MyPint();
	BYTE	m_bOldBytes[5];		
	BYTE	m_bNewBytes[5];		
	ZeroMemory(m_bOldBytes, 5);
	ZeroMemory(m_bNewBytes, 5);
	if(pMyPint1 != NULL)
	{
		DWORD dwNum = 0;
		ReadProcessMemory(GetCurrentProcess(), pMyPint1, m_bOldBytes, 5, &dwNum);
		m_bNewBytes[0] = '\xe9';		//jmp
		*(DWORD *)(m_bNewBytes + 1) = (DWORD)pMyPint2 - (DWORD)pMyPint1 - 5;
		WriteProcessMemory(GetCurrentProcess(), pMyPint1, m_bNewBytes, 5, &dwNum);
	}
	MyPint();
	if(pMyPint1 != 0)
	{
		DWORD dwNum = 0;
		WriteProcessMemory(GetCurrentProcess(), pMyPint1, m_bOldBytes, 5, &dwNum);
	}
	MyPint();
	system("pause");
	return 0;
}

运行结果