Relative jump hook

c++ / delphi package - dll injection and api hooking
Post Reply
_NN_
Posts: 55
Joined: Mon Jan 21, 2013 4:00 pm

Relative jump hook

Post by _NN_ »

Hallo,

I have asked this several years ago.
When do you plan to include relative jump instead of absolute ?
I am choosing a hooking framework and dll injection for my new project and you are a good candidate.
Unfortunately 6-byte jump sometimes makes other programs to behave poorly.

This should not be so hard, if you need any help I will gladly help you.
madshi
Site Admin
Posts: 10754
Joined: Sun Mar 21, 2004 5:25 pm

Re: Relative jump hook

Post by madshi »

madCodeHook v4 uses a 5-byte relative JMP.
_NN_
Posts: 55
Joined: Mon Jan 21, 2013 4:00 pm

Re: Relative jump hook

Post by _NN_ »

Wunderbar !
That's great news.
madshi
Site Admin
Posts: 10754
Joined: Sun Mar 21, 2004 5:25 pm

Re: Relative jump hook

Post by madshi »

And it's even still "compatible" to 6-byte-JMP v3 hooks. Meaning, v3 and v4 still share the same automatic hooking queue/chain, so when a v3 and v4 hook dll hook the same API, the order of API hook installation and uninstallation doesn't matter, it's handled cleanly in any case. However, if v3 installs the API hook first, it will be a 6-byte-JMP. If v4 installs first, it will be a 5-byte-JMP.
Post Reply