malwaretech / basichook

x86 Inline hooking engine (using trampolines)

BasicHook

Hooks functions using 32-bit relative jump, writing is done atomically to avoid race conditions. Uses hde32 from instruction length disassembly.

basichook's Issues

x64

Is this source support 64bit process?
If not, can you update 64bit version?
Thank

Avoid using inline assmbly

You can use _InterlockedCompareExchange64 to get rid of the inline assembly, plus if you want to be pedantic about safe patching, you should call FlushInstructionCache as well.

Get rid of VC2017 C++ compiler warning

Type definitions for hook functions are a little bit inconsistent
Consider this to get rid ot the warning:

typedef int (WINAPI *TdefOldMessageBoxA)(HWND hWnd, LPCSTR lpText, LPCSTR lpCaption, UINT uType);
typedef int (WINAPI *TdefOldMessageBoxW)(HWND hWnd, LPWSTR lpText, LPCWSTR lpCaption, UINT uType);

int WINAPI NewMessageBoxA(HWND hWnd, LPCSTR lpText, LPCSTR lpCaption, UINT uType);
int WINAPI NewMessageBoxW(HWND hWnd, LPWSTR lpText, LPCWSTR lpCaption, UINT uType);