-
-
[旧帖] 关于Hook WriteProcessMemory 0.00雪花
-
发表于: 2010-5-29 18:57
-
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 | BOOL WINAPI MyWriteProcessMemory( HANDLE hProcess, // handle to processLPVOID lpBaseAddress, // base of memory areaLPVOID lpBuffer, // data bufferDWORD nSize, // number of bytes to writeLPDWORD lpNumberOfBytesWritten // number of bytes written);DETOUR_TRAMPOLINE(BOOL WINAPI CopyWriteProcessMemory(HANDLE, LPVOID, LPVOID, DWORD, LPDWORD), WriteProcessMemory);BOOL WINAPI MyWriteProcessMemory(HANDLE hProcess, // handle to processLPVOID lpBaseAddress, // base of memory areaLPVOID lpBuffer, // data bufferDWORD nSize, // number of bytes to writeLPDWORD lpNumberOfBytesWritten) // number of bytes written{ BOOL nResult=CopyWriteProcessMemory(hProcess,lpBaseAddress,lpBaseAddress,nSize,lpNumberOfBytesWritten); MessageBoxA(NULL,(LPCTSTR)lpBaseAddress,"Hook!",MB_OK); return nResult;} BOOL APIENTRY DllMain( HANDLE hModule, DWORD ul_reason_for_call, LPVOID lpReserved ){ switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: OutputDebugString("Detour dll Load!"); DetourFunctionWithTrampoline((PBYTE)CopyWriteProcessMemory, (PBYTE)MyWriteProcessMemory); break; case DLL_THREAD_ATTACH: break; case DLL_THREAD_DETACH: break; case DLL_PROCESS_DETACH: OutputDebugString("Detour dll Exit!"); DetourRemove((PBYTE)CopyWriteProcessMemory, (PBYTE)MyWriteProcessMemory); break; } return TRUE;} |
大致代码是这样的 不过不知道为什么 注入之后我用自己写的EXE用WriteProcessMemory写内存 是成功了 但是不会出现MessageBoxA
