Method CheckInlineHook

WinArk/ProcessInlineHookTable.cpp:476–503

}

void CProcessInlineHookTable::CheckInlineHook(uint8_t* code, size_t codeSize, uint64_t address, ULONG_PTR moduleBase, SIZE_T moduleSize) {
	// �����ʱ��ϳ�������£��ῨUI
	size_t count;
	cs_insn* insn;
	if (_x64) {
		count = cs_disasm(_x64handle, code, codeSize, address, 0, &insn);
		if (count > 0) {
			for (size_t j = 0; j < count; j++) {
				CheckX64HookType1(insn, j, count, moduleBase, moduleSize, address, codeSize);
				CheckX64HookType2(insn, j, count);
				CheckX64HookType4(insn, j, count, moduleBase, moduleSize, address, codeSize);
			}
			cs_free(insn, count);
		}
	}
	else {
		count = cs_disasm(_x86handle, code, codeSize, address, 0, &insn);
		if (count > 0) {
			for (size_t j = 0; j < count; j++) {
				CheckX86HookType1(insn, j, count, moduleBase, moduleSize);
				CheckX86HookType2(insn, j, count);
				CheckX86HookType3(insn, j, count);
				CheckX86HookType6(insn, j, count);
			}
			cs_free(insn, count);
		}
	}
}

void CProcessInlineHookTable::Refresh() {
	m_VMTracker->EnumRegions();