Cheat Engine

[rapion124]

How do you write inline API hooks with C++? Those are the ones that put a jmp at the start of the API. So far, I can only write IAT hooks with C++. When I try to do it the inline way, after hooking the API, the program crashes. An example inline API hook in C++ would be helpful.

[HalfPrime]

If you hook the function, you'll need to do something so it doesn't crash. depending on what you want to do, you could have it jump to your code-cave, then you can do some stuff, then you'd need to do the first 5 bytes of the api that you wrote over with your jump yourself. If you want to disable that api, I'm not sure what you'd need to do to keep it from crashing. jsut a return will probably not be sufficient and it will probably be different for most APIs.

[oib111]

Ferocious's Trampoline documentation was great. In fact, I suggest using it for all your inline API hooking needs. Btw, I would greatly love an example code for IAT hooks, do you mind putting a link to where you were taught it? Anyway here's the code.

[atom0s]

There is ton of examples for IAT hooking on GameDeception. Their site is currently down as their hosts building power room 'exploded' yesterday. So their entire network is down at the moment. Should be back up tomorrow though according to them.

Article on the server thing:
http://tech.slashdot.org/tech/08/06/01/1715247.shtml

[rapion124]

I found the problem that makes the program crash. In C++, when you use two __declspec calling convensions, the second one is ignored. I used __declspec(dllexport) and __declspec(naked). As a result, the naked is omitted and C++ adds prologue code to the hook function. That corrupts the stack and then the program crashes. Took out the __declspec(dllexport) and the hook works fine.

[atom0s]

Just a side note, you shouldn't have been trying to export the function since you wanted to use it inline anyway. Only reason to export it is to allow outside access to the function (with ease).