C++實(shí)現(xiàn)修改函數(shù)代碼HOOK的封裝方法
來(lái)源：本站原創(chuàng)|時(shí)間：2020-01-10|欄目：C語(yǔ)言|點(diǎn)擊： 次
本文實(shí)例講述了C++實(shí)現(xiàn)修改函數(shù)代碼HOOK的封裝方法，分享給大家供大家參考。具體實(shí)現(xiàn)方法如下：
一、對(duì)外的接口如下：
1. 類初始化時(shí)對(duì)函數(shù)HOOK
2. 取消掛鉤：
void UnHook();
3. 重新掛鉤：
void ReHook();
在初始化時(shí)HOOK的代碼：
復(fù)制代碼 代碼如下:
*(DWORD*)(m_btNewBytes+1) = (DWORD)pfnHook;
8個(gè)字節(jié)的代碼地址 0xB8, 0x00, 0x00,0x40,0x00,0xFF,0xE0,0x00 只要把第二位和第三位的數(shù)據(jù)改成函數(shù)的地址，調(diào)用原先的函數(shù)時(shí)就會(huì)調(diào)到自定義的函數(shù)執(zhí)行.
二、實(shí)現(xiàn)方法：
.h頭文件如下：
復(fù)制代碼 代碼如下:
#ifndef _ULHOOK_H__
#define _ULHOOK_H__
#include <Windows.h>
#pragma once
class CULHook
{
public:
CULHook(LPSTR lpszModName, LPSTR lpszFuncNme, PROC pfnHook);
~CULHook(void);
//取消掛鉤
void UnHook();
//重新掛鉤
void ReHook();
protected:
PROC m_pfnOrig;
BYTE m_btNewBytes[8];
BYTE m_btOldBytes[8];
HMODULE m_hModule;
};
#endif
#define _ULHOOK_H__
#include <Windows.h>
#pragma once
class CULHook
{
public:
CULHook(LPSTR lpszModName, LPSTR lpszFuncNme, PROC pfnHook);
~CULHook(void);
//取消掛鉤
void UnHook();
//重新掛鉤
void ReHook();
protected:
PROC m_pfnOrig;
BYTE m_btNewBytes[8];
BYTE m_btOldBytes[8];
HMODULE m_hModule;
};
#endif
.cpp源文件如下：
復(fù)制代碼 代碼如下:
#include "ULHook.h"
CULHook::CULHook(LPSTR lpszModName, LPSTR lpszFuncNme, PROC pfnHook)
{
BYTE btNewBytes[] = {0xB8, 0x00, 0x00,0x40,0x00,0xFF,0xE0,0x00};
memcpy(m_btNewBytes, btNewBytes, 8);
*(DWORD*)(m_btNewBytes+1) = (DWORD)pfnHook;
m_hModule = ::LoadLibraryA(lpszModName);
if (NULL == m_hModule)
{
m_pfnOrig = NULL;
return;
}
m_pfnOrig = (PROC)::GetProcAddress(m_hModule, lpszFuncNme);
if (NULL != m_pfnOrig)
{
MEMORY_BASIC_INFORMATION mbi = {0};
DWORD dwOldProtect;
::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));
::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);
memcpy(m_btOldBytes, m_pfnOrig, 8);
::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btNewBytes, 8, NULL);
::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);
}
}
CULHook::~CULHook(void)
{
UnHook();
if (m_hModule!=NULL)
{
::FreeLibrary(m_hModule);
}
}
void CULHook::UnHook()
{
if (m_pfnOrig != NULL)
{
MEMORY_BASIC_INFORMATION mbi = {0};
DWORD dwOldProtect;
::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));
::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);
::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btOldBytes, 8, NULL);
::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);
}
}
void CULHook::ReHook()
{
if (m_pfnOrig != NULL)
{
MEMORY_BASIC_INFORMATION mbi = {0};
DWORD dwOldProtect;
::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));
::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);
::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btNewBytes, 8, NULL);
::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);
}
}
CULHook::CULHook(LPSTR lpszModName, LPSTR lpszFuncNme, PROC pfnHook)
{
BYTE btNewBytes[] = {0xB8, 0x00, 0x00,0x40,0x00,0xFF,0xE0,0x00};
memcpy(m_btNewBytes, btNewBytes, 8);
*(DWORD*)(m_btNewBytes+1) = (DWORD)pfnHook;
m_hModule = ::LoadLibraryA(lpszModName);
if (NULL == m_hModule)
{
m_pfnOrig = NULL;
return;
}
m_pfnOrig = (PROC)::GetProcAddress(m_hModule, lpszFuncNme);
if (NULL != m_pfnOrig)
{
MEMORY_BASIC_INFORMATION mbi = {0};
DWORD dwOldProtect;
::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));
::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);
memcpy(m_btOldBytes, m_pfnOrig, 8);
::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btNewBytes, 8, NULL);
::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);
}
}
CULHook::~CULHook(void)
{
UnHook();
if (m_hModule!=NULL)
{
::FreeLibrary(m_hModule);
}
}
void CULHook::UnHook()
{
if (m_pfnOrig != NULL)
{
MEMORY_BASIC_INFORMATION mbi = {0};
DWORD dwOldProtect;
::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));
::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);
::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btOldBytes, 8, NULL);
::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);
}
}
void CULHook::ReHook()
{
if (m_pfnOrig != NULL)
{
MEMORY_BASIC_INFORMATION mbi = {0};
DWORD dwOldProtect;
::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));
::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);
::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btNewBytes, 8, NULL);
::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);
}
}
希望本文所述對(duì)大家的C++程序設(shè)計(jì)有所幫助。
上一篇：C++之WSAAsyncSelect模型實(shí)例
欄 目：C語(yǔ)言
本文標(biāo)題：C++實(shí)現(xiàn)修改函數(shù)代碼HOOK的封裝方法
本文地址：http://mengdiqiu.com.cn/a1/Cyuyan/3273.html
您可能感興趣的文章
- 04-02c語(yǔ)言沒(méi)有round函數(shù) round c語(yǔ)言
- 01-10數(shù)據(jù)結(jié)構(gòu)課程設(shè)計(jì)-用棧實(shí)現(xiàn)表達(dá)式求值的方法詳解
- 01-10使用OpenGL實(shí)現(xiàn)3D立體顯示的程序代碼
- 01-10深入理解C++中常見(jiàn)的關(guān)鍵字含義
- 01-10求斐波那契(Fibonacci)數(shù)列通項(xiàng)的七種實(shí)現(xiàn)方法
- 01-10C語(yǔ)言 解決不用+、-、&#215;、&#247;數(shù)字運(yùn)算符做加法
- 01-10使用C++實(shí)現(xiàn)全排列算法的方法詳解
- 01-10c++中inline的用法分析
- 01-10用C++實(shí)現(xiàn)DBSCAN聚類算法
- 01-10深入全排列算法及其實(shí)現(xiàn)方法
閱讀排行
- 1C語(yǔ)言 while語(yǔ)句的用法詳解
- 2java 實(shí)現(xiàn)簡(jiǎn)單圣誕樹的示例代碼(圣誕
- 3利用C語(yǔ)言實(shí)現(xiàn)“百馬百擔(dān)”問(wèn)題方法
- 4C語(yǔ)言中計(jì)算正弦的相關(guān)函數(shù)總結(jié)
- 5c語(yǔ)言計(jì)算三角形面積代碼
- 6什么是 WSH(腳本宿主)的詳細(xì)解釋
- 7C++ 中隨機(jī)函數(shù)random函數(shù)的使用方法
- 8正則表達(dá)式匹配各種特殊字符
- 9C語(yǔ)言十進(jìn)制轉(zhuǎn)二進(jìn)制代碼實(shí)例
- 10C語(yǔ)言查找數(shù)組里數(shù)字重復(fù)次數(shù)的方法
本欄相關(guān)
- 04-02c語(yǔ)言函數(shù)調(diào)用后清空內(nèi)存 c語(yǔ)言調(diào)用
- 04-02func函數(shù)+在C語(yǔ)言 func函數(shù)在c語(yǔ)言中
- 04-02c語(yǔ)言的正則匹配函數(shù) c語(yǔ)言正則表達(dá)
- 04-02c語(yǔ)言用函數(shù)寫分段 用c語(yǔ)言表示分段
- 04-02c語(yǔ)言中對(duì)數(shù)函數(shù)的表達(dá)式 c語(yǔ)言中對(duì)
- 04-02c語(yǔ)言編寫函數(shù)冒泡排序 c語(yǔ)言冒泡排
- 04-02c語(yǔ)言沒(méi)有round函數(shù) round c語(yǔ)言
- 04-02c語(yǔ)言分段函數(shù)怎么求 用c語(yǔ)言求分段
- 04-02C語(yǔ)言中怎么打出三角函數(shù) c語(yǔ)言中怎
- 04-02c語(yǔ)言調(diào)用函數(shù)求fibo C語(yǔ)言調(diào)用函數(shù)求
隨機(jī)閱讀
- 01-10delphi制作wav文件的方法
- 01-10C#中split用法實(shí)例總結(jié)
- 01-11Mac OSX 打開(kāi)原生自帶讀寫NTFS功能(圖文
- 01-10SublimeText編譯C開(kāi)發(fā)環(huán)境設(shè)置
- 08-05織夢(mèng)dedecms什么時(shí)候用欄目交叉功能？
- 04-02jquery與jsp,用jquery
- 01-11ajax實(shí)現(xiàn)頁(yè)面的局部加載
- 08-05dedecms(織夢(mèng))副欄目數(shù)量限制代碼修改
- 08-05DEDE織夢(mèng)data目錄下的sessions文件夾有什
- 01-10使用C語(yǔ)言求解撲克牌的順子及n個(gè)骰子