http://www.xiaozhou.net/vcdevelopment/winapi-hook-modify-the-first-five-bytes-jmp-jump-method-2004-09-07.htm 君看一叶舟，出没风波里 Wed, 08 Feb 2012 04:55:44 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://www.xiaozhou.net/vcdevelopment/winapi-hook-modify-the-first-five-bytes-jmp-jump-method-2004-09-07.htm/comment-page-1#comment-4 qwe Wed, 08 Aug 2007 22:51:23 +0000 http://localhost/wordpress/?p=12#comment-4 jmp MyMessageBoxA的相对地址的指令 _asm { lea eax,MyMessageBoxA mov ebx,pfMessageBoxA sub eax,ebx sub eax,5 // 是不是应改为 add eax,5 mov dword ptr [NewMessageBoxACode+1],eax } jmp MyMessageBoxA的相对地址的指令
_asm
{
lea eax,MyMessageBoxA
mov ebx,pfMessageBoxA
sub eax,ebx
sub eax,5 // 是不是应改为 add eax,5
mov dword ptr [NewMessageBoxACode+1],eax
}

]]> http://www.xiaozhou.net/vcdevelopment/winapi-hook-modify-the-first-five-bytes-jmp-jump-method-2004-09-07.htm/comment-page-1#comment-3 allenhiman Wed, 23 Feb 2005 09:30:51 +0000 http://localhost/wordpress/?p=12#comment-3 [wink] [wink]

]]> http://www.xiaozhou.net/vcdevelopment/winapi-hook-modify-the-first-five-bytes-jmp-jump-method-2004-09-07.htm/comment-page-1#comment-2 李帮全 Wed, 08 Dec 2004 17:04:03 +0000 http://localhost/wordpress/?p=12#comment-2 [rolleyes] [rolleyes]

]]>