新手问题
BOOL WINAPI MyWriteProcessMemory(
HANDLE hProcess, // handle to process
LPVOID lpBaseAddress, // base of memory area
LPVOID lpBuffer, // data buffer
DWORD nSize, // number of bytes to write
LPDWORD lpNumberOfBytesWritten // number of bytes written
);
DETOUR_TRAMPOLINE(BOOL WINAPI CopyWriteProcessMemory(HANDLE, LPVOID, LPVOID, DWORD, LPDWORD), WriteProcessMemory);
BOOL WINAPI MyWriteProcessMemory(
HANDLE hProcess, // handle to process
LPVOID lpBaseAddress, // base of memory area
LPVOID lpBuffer, // data buffer
DWORD nSize, // number of bytes to write
LPDWORD lpNumberOfBytesWritten) // number of bytes written
{
BOOL nResult=CopyWriteProcessMemory(hProcess,lpBaseAddress,lpBaseAddress,nSize,lpNumberOfBytesWritten);
MessageBoxA(NULL,(LPCTSTR)lpBaseAddress,"Hook!",MB_OK);
return nResult;
}
BOOL APIENTRY DllMain( HANDLE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
switch (ul_reason_for_call)
{
case DLL_PROCESS_ATTACH:
OutputDebugString("Detour dll Load!");
DetourFunctionWithTrampoline((PBYTE)CopyWriteProcessMemory, (PBYTE)MyWriteProcessMemory);
break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
break;
case DLL_PROCESS_DETACH:
OutputDebugString("Detour dll Exit!");
DetourRemove((PBYTE)CopyWriteProcessMemory, (PBYTE)MyWriteProcessMemory);
break;
}
return TRUE;
}
请问这段代码为何注入之后 我用EXE程序调用了WriteProcessMemory 拦截不了。。。
而我照着拦截 MessageBox函数改也拦截不了。。代码如下:
#include <windows.h>
#include "detours.h"
#pragma comment(lib, "detours.lib")
#pragma comment(lib, "detoured.lib")
BOOL (WINAPI *pWriteProcessMemory)(HANDLE hProcess,LPVOID lpBaseAddress,LPCVOID lpBuffer,SIZE_T nSize,SIZE_T * lpNumberOfBytesWritten)
=WriteProcessMemory;
BOOL WINAPI HookWriteProcessMemory(HANDLE hProcess,LPVOID lpBaseAddress,LPCVOID lpBuffer,SIZE_T nSize,SIZE_T * lpNumberOfBytesWritten)
{
return pWriteProcessMemory(hProcess,(LPVOID)0x00170000,lpBuffer,nSize,lpNumberOfBytesWritten);
}
BOOL APIENTRY DllMain( HMODULE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
switch (ul_reason_for_call)
{
case DLL_PROCESS_ATTACH:
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourAttach(&(PVOID&)pWriteProcessMemory, HookWriteProcessMemory);
DetourTransactionCommit();
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourDetach(&(PVOID&)pWriteProcessMemory, HookWriteProcessMemory);
DetourTransactionCommit();
break;
}
return TRUE;
}
...全文
相关推荐
新手经常遇到domino问题的总结
对于初次接触Domino的新手来说,可能会遇到各种问题,这些问题涵盖了设置、配置、使用以及开发等多个方面。以下是对新手在使用Domino时可能遇到的一些常见问题的总结:1.
解决vfp新手问题集所有问题解决方法
对于初学者来说,可能会遇到各种各样的问题,而"解决vfp新手问题集"显然是一个专门针对这些问题的资源集合。
ASPCMS新手常见问题
ASPCMS新手常见问题指南在学习和使用ASPCMS的过程中,新手可能会遇到一系列问题,这些问题对于快速掌握这个内容管理系统至关重要。以下是一些常见的问题及其解决方案:1. 本地环境搭建:
c语言新手问题答案
在C语言的学习过程中,新手经常会遇到各种挑战。以下是对C语言新手常见问题的详细解答,这些问题涵盖了基础语法、数据类型、运算符、控制结构、数组、指针等核心概念。1.
asp.net开发新手常见问题集锦
ASP.NET开发对于新手来说是一门极具挑战性和实用价值的技能,它利用微软的.NET框架为Web应用程序提供了强大的构建基础。本文旨在为刚接触ASP.NET的新手提供一份常见问题集锦,帮助他们解决入门


