PDA

View Full Version : nifty info about class hooking



sp0rky
02-11-2005, 04:01 PM
Ok, whether you are using lances VTABLE hook or a struct like the one Azorbix and I made, this may be of some use to you.

Let's say you have the filesystem ptr and you notice it has an Open method. You say, hmm I want to hook that and see what it's opening.



class IFileSystem : public IBaseFileSystem, public IAppSystem


The open method is not in IFileSystem, but in IBaseFileSystem, so how do you get to it with a struct or with lances VTABLE hook? Simple.



IBaseFileSystem *pBaseFileSys = (IBaseFileSystem *)filesystem;


Use pBaseFileSys to hook the Open method.

Credits: Xen, el pat0, and all the adv/priv area of GD

This may not appear elsewhere without permission, but may be linked to.