hookapi_jmp.h

《Windows应用程序捆绑核心编程》配套源码

// HookApi_JMP.h:使用JMP法写的一个HOOK API的类.
//
#ifndef _HOOK_API_JMP
#define _HOOK_API_JMP

// 直接跳转类.
class CHookApi_Jmp  
{
public: 
	CHookApi_Jmp(); 
	virtual ~CHookApi_Jmp();

public:
	void HookOneAPI(LPCTSTR ModuleName, LPCTSTR ApiName, FARPROC lpNewFunc);
	void SetHookOn(); 
	void SetHookOff(); 
	
protected: 
	HANDLE m_hProc; 
	BYTE m_OldFunc[8]; 
	BYTE m_NewFunc[8]; 
	PROC m_lpHookFunc; 
};

// 间接跳转类.
class CHookApi_Jmp2  
{
public:
	CHookApi_Jmp2();
	virtual ~CHookApi_Jmp2();

public:
	void HookOneAPI(LPCTSTR ModuleName,LPCTSTR ApiName,FARPROC lpNewFunc);
	void SetHookOn(); 
	void SetHookOff(); 

protected: 
	HANDLE m_hProc; 
	BYTE m_OldFunc[8]; 
	BYTE m_NewFunc[8]; 
	PROC m_lpHookFunc; 
};
#endif