07.01.2010, 16:07
Oh I see what he does there, he lifts the protection with VirtualProtect so he can edit the address.
When he is done he restores the protection.
What I don't get however is why he sets the first byte to 0xE8, and what he does with that "disp" variable.
Those type macros are not making it any easier for me, I always avoid using the windows.h header and all stuff in it so I don't really have them memorised, I know what BYTE and DWORD stand for but PDWORD?
Also is there a way of lifting the protection without using a platform specific function?
When he is done he restores the protection.
What I don't get however is why he sets the first byte to 0xE8, and what he does with that "disp" variable.
Those type macros are not making it any easier for me, I always avoid using the windows.h header and all stuff in it so I don't really have them memorised, I know what BYTE and DWORD stand for but PDWORD?
Also is there a way of lifting the protection without using a platform specific function?

