在VC中ADE32反汇编引擎的使用,打算配合inline hook使用。。(～ o ～)~zZ

ADE32下载，CSDN上有，自己找下

1 在工程文件中加入ADE32.OBJ 和ADE32.H

2 在工程的CPP文件中加入

extern "C"

{

#include "ADE32.H"

void ade32_init(DWORD *);

DWORD ade32_disasm(BYTE *, disasm_struct *, DWORD *);

DWORD ade32_asm(BYTE *, disasm_struct *);

};

简单应用1：获取函数FUNC代码段的长度(一定要在Release下)

void Func()

{

char *p = "my baby";

printf("Hello world");

}

////////////////////////

printf("Func Address = 0x%08X/n",Func);

DWORD ade32_flagtable[512];

ade32_init(ade32_flagtable);

DWORD dwCodeLen = 0;

// disassemble code section opcode by opcode

for(DWORD ip = (DWORD)Func; ; )

{

disasm_struct s = {4,4}; // prepare to disasm 32-bit code

// disassemble opcode

DWORD len = ade32_disasm((BYTE*)ip, &s, ade32_flagtable);

if (len == 0) break; // cant disassemble?

// dump length, offset and hex bytes

printf("(%i) %08X ",len,ip);

for(DWORD j=0; j<len; j++) printf(" %02X",*(BYTE*)(ip+j));

printf("/n");

dwCodeLen += len;

if (len ==1)

{

if(*(BYTE *)ip == 0XC3 || *(BYTE *)ip == 0XCB ) //retn = 0xc3 retf = 0xcb

{

printf("Func Code Length = 0x%08X", dwCodeLen);

break;

}

}

ip += len;

}