{

public:

virtual DWORD someFunction(DWORD arg1) { return 0; }

{

public:

virtual DWORD someFunction(DWORD arg1)

{

if (arg1 == 1)

printf(" VF Table hook worked! Parameters intercepted and changed!\n");

else

printf(" VF Table hook failed!\n");

return 0;

}

{

// notice how we take ECX and store it in a variable..

// this is done because it stores the class instance pointer ("this")

// and we want to make sure our code doesn't overwrite it (the compiler

// doesn't understand that this is a VF hook, so it may think ECX is

// free for it to use)

static DWORD _this, _ret;

__asm MOV _this, ECX

printf("VFHook pre\n");

__asm {

PUSH 1

MOV ECX, _this

CALL [originalVFFunction]

MOV _ret, EAX

}

printf("VFHook Post\n");

__asm MOV ECX, _this

return _ret;

{

DWORD VFTable = readMemory<DWORD>(classInst);

DWORD hookAddress = VFTable + funcIndex * sizeof(DWORD);

auto oldProtection = protectMemory<DWORD>(hookAddress, PAGE_READWRITE);

DWORD originalFunc = readMemory<DWORD>(hookAddress);

writeMemory<DWORD>(hookAddress, newFunc);

protectMemory<DWORD>(hookAddress, oldProtection);

return originalFunc;

{

someClass* inst = new someClass();

originalVFFunction = hookVF((DWORD)inst, 0, (DWORD)&someNewVFFunction);

inst->someFunction(0);

delete inst;

}