提交 521ebef3 编写于 作者: Peacoor Zomboss's avatar Peacoor Zomboss

Use memcpy rather ReadProcessMemory

上级 8086d7ce
......@@ -47,13 +47,12 @@ void inithook()
hook_jump[8] = 0x04; // mov dword [rsp+4], yyy
*(long *)&hook_jump[9] = ptr64.hi; // yyy,即地址的高4位
hook_jump[13] = 0xC3; // ret
ReadProcessMemory(GetCurrentProcess(), hook_func, old_entry, HOOK_JUMP_LEN, NULL);
#endif
#ifdef _CPU_X86
hook_jump[0] = 0xE9;
*(long *)&hook_jump[1] = (BYTE *)fk_WriteConsoleA - (BYTE *)hook_func - 5;
ReadProcessMemory(GetCurrentProcess(), hook_func, old_entry, HOOK_JUMP_LEN, NULL);
#endif
memcpy(&old_entry, hook_func, HOOK_JUMP_LEN);
}
void dohook()
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册