Relative jump hook

c++ / delphi package - dll injection and api hooking

Relative jump hook

Postby _NN_ » Thu Jul 05, 2018 7:52 am

Hallo,

I have asked this several years ago.
When do you plan to include relative jump instead of absolute ?
I am choosing a hooking framework and dll injection for my new project and you are a good candidate.
Unfortunately 6-byte jump sometimes makes other programs to behave poorly.

This should not be so hard, if you need any help I will gladly help you.
_NN_
 
Posts: 37
Joined: Mon Jan 21, 2013 4:00 pm

Re: Relative jump hook

Postby madshi » Thu Jul 05, 2018 7:55 am

madCodeHook v4 uses a 5-byte relative JMP.
madshi
Site Admin
 
Posts: 9719
Joined: Sun Mar 21, 2004 5:25 pm

Re: Relative jump hook

Postby _NN_ » Thu Jul 05, 2018 8:00 am

Wunderbar !
That's great news.
_NN_
 
Posts: 37
Joined: Mon Jan 21, 2013 4:00 pm

Re: Relative jump hook

Postby madshi » Thu Jul 05, 2018 8:11 am

And it's even still "compatible" to 6-byte-JMP v3 hooks. Meaning, v3 and v4 still share the same automatic hooking queue/chain, so when a v3 and v4 hook dll hook the same API, the order of API hook installation and uninstallation doesn't matter, it's handled cleanly in any case. However, if v3 installs the API hook first, it will be a 6-byte-JMP. If v4 installs first, it will be a 5-byte-JMP.
madshi
Site Admin
 
Posts: 9719
Joined: Sun Mar 21, 2004 5:25 pm


Return to madCodeHook

Who is online

Users browsing this forum: pambol and 5 guests