NewTextOutWAddr.MovEax:=$B8;
NewtextOutWAddr.Addr := DWORD(@MyTextOutW);
NewTextOutWAddr.JmpCode := $E0FF;
NewTextOutWAddr.dwReserved :=$08;
BaseTextOutW:=GetFuncRealAddr(@TextOutW);
if ReadProcessMemory(hProcess,BaseTextOutW,@PTextOutW[0],8,dwReserved) then
else Exit;
WriteProcessMemory(hProcess,BaseTextOutW,@NewTextOutWAddr,8,dwReserved);
我读出了TextOutW APi的基地址,也把新的地址写进去了,实现了API跳转,怎么执行原来的API啊?原始跳转我保存在PTextOutW里面了。不知道这个怎么用.
NewtextOutWAddr.Addr := DWORD(@MyTextOutW);
NewTextOutWAddr.JmpCode := $E0FF;
NewTextOutWAddr.dwReserved :=$08;
BaseTextOutW:=GetFuncRealAddr(@TextOutW);
if ReadProcessMemory(hProcess,BaseTextOutW,@PTextOutW[0],8,dwReserved) then
else Exit;
WriteProcessMemory(hProcess,BaseTextOutW,@NewTextOutWAddr,8,dwReserved);
我读出了TextOutW APi的基地址,也把新的地址写进去了,实现了API跳转,怎么执行原来的API啊?原始跳转我保存在PTextOutW里面了。不知道这个怎么用.