C++实现修改函数代码HOOK的封装方法

2020-01-06 13:03:55王冬梅

    if (NULL == m_hModule)  
    {  
        m_pfnOrig = NULL;  
        return;  
    }  
    m_pfnOrig = (PROC)::GetProcAddress(m_hModule, lpszFuncNme);  
    if (NULL != m_pfnOrig)  
    {  
        MEMORY_BASIC_INFORMATION mbi = {0};  
        DWORD dwOldProtect;  
        ::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));  
        ::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);  
        memcpy(m_btOldBytes, m_pfnOrig, 8);  
        ::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btNewBytes, 8, NULL);  
        ::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);  
    }  
}  
  
CULHook::~CULHook(void)  
{  
    UnHook();  
    if (m_hModule!=NULL)  
    {  
        ::FreeLibrary(m_hModule);  
    }  
}  
void CULHook::UnHook()  
{  
    if (m_pfnOrig != NULL)  
    {  
        MEMORY_BASIC_INFORMATION mbi = {0};  
        DWORD dwOldProtect;  
        ::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));  
        ::VirtualProtect(m_pfnOrig, 8, PAGE_READWRITE, &dwOldProtect);  
        ::WriteProcessMemory(GetCurrentProcess(), (VOID*)m_pfnOrig, m_btOldBytes, 8, NULL);  
        ::VirtualProtect(m_pfnOrig, 8, dwOldProtect, NULL);  
    }  
}  
  
void CULHook::ReHook()  
{  
    if (m_pfnOrig != NULL)  
    {  
        MEMORY_BASIC_INFORMATION mbi = {0};  
        DWORD dwOldProtect;  
        ::VirtualQuery(m_pfnOrig, &mbi, sizeof(mbi));