求64位Win7下能用的Hook Socket程序

[easydw]

现在网上有很多Hook socket程序,但是在64位Win7下都变的不稳定, 极易崩溃推出。但是，我试了下WPE就可以稳定的运行。
请众位大虾指教，提供下可用的代码，谢谢！

[阿呆_]

64位下hook的库函数入口一般不能直接用5字节的jmp xxxx替换, 因为你的代码和系统库函数的入口距离可能超过了32bit虚拟地址范围，必须用间接跳转或push - ret

[easydw]

楼上的能留个QQ联系下吗? 64位的内容真的不太清楚

[easydw]

看来还是自力更生才是王道

[阿呆_]

I don't have QQ. Actually that's quite simple using 64 bit code to jmp to an absolute 64 bit address: push imm32 (68xxxxxxxx -- high 32 bit part of 64 bit address) push imm32 (68xxxxxxxx -- low 32 bit part of 64 bit address) ret (c3) The only problem is this form needs 11 bytes other than 5 bytes in 32 bit jmp.