-
-
[求助][求助]RING3 HOOK 调用原函数
-
发表于: 2011-9-16 09:07
-
HANDLE WINAPI NewCreateMutexW(
LPSECURITY_ATTRIBUTES lpMutexAttributes,
BOOL bInitialOwner,
LPCWSTR lpName
)
{
HOOK_API_STRUCT Info;
HookCreateMutexW.GetInfo(&Info);
pCreateMutexW pFunction = (pCreateMutexW)(DWORD)Info.NewFunction;
dPrintf("调用函数：CreateMutexW\n");
HANDLE handle = pFunction(lpMutexAttributes,bInitialOwner,lpName);
return handle;
}
Info.NewFunction其实就是 UCHAR 变量 复制函数头 添加跳转回原函数，这个地址都是正确的
但是就是调用错误，大家帮忙看看
LPSECURITY_ATTRIBUTES lpMutexAttributes,
BOOL bInitialOwner,
LPCWSTR lpName
)
{
HOOK_API_STRUCT Info;
HookCreateMutexW.GetInfo(&Info);
pCreateMutexW pFunction = (pCreateMutexW)(DWORD)Info.NewFunction;
dPrintf("调用函数：CreateMutexW\n");
HANDLE handle = pFunction(lpMutexAttributes,bInitialOwner,lpName);
return handle;
}
Info.NewFunction其实就是 UCHAR 变量 复制函数头 添加跳转回原函数，这个地址都是正确的
但是就是调用错误，大家帮忙看看
[培训]科锐软件逆向54期预科班、正式班开始火爆招生报名啦！！！
|
|
|---|---|
|
|
|
|
|
|
|
|
|
