Can we hook some func in another process then change return address?

		Exetools > General > General Discussion
Can we hook some func in another process then change return address?

Thread Tools

Display Modes

09-21-2004, 11:12

xzz

Posts: n/a

E.g

in ntdll.dll
you can find return address and simple you can hook them,
the address from my ntdll.dll

;Native API
SYSTEM_CALL equ 7FFE0300h
NtAllocateVirtualMemory equ 77F5b54Eh

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
How do I know what information return this address?	byvs	General Discussion	5	11-20-2015 20:57
Problem with Return Address	ArC	General Discussion	2	08-03-2003 16:13

All times are GMT +8. The time now is 21:42.