Изменение Команды //healhty

    
void WriteMemory(DWORD *pAddress, LPCVOID pData, BYTE length)
{
   DWORD dwOldProtect = NULL;
   SIZE_T bWritten = NULL;
   VirtualProtect((LPVOID)(pAddress), length, PAGE_EXECUTE_READWRITE, &dwOldProtect);
   WriteProcessMemory(L2Server, (LPVOID)(pAddress), (LPCVOID)pData, length, &bWritten);
   VirtualProtect((LPVOID)(pAddress), length, dwOldProtect, &dwOldProtect);
}


..............




void WriteFunctionHook(BYTE *pAddress, DWORD *pFunction, BYTE bNops)
{
   BYTE Call = 0xE9;
   BYTE Nop = 0x90;
   WriteMemory((DWORD *)(pAddress), (LPCVOID)&Call, 1);
   DWORD pFuncAddress = (DWORD)pFunction - (DWORD)(pAddress+5);
   WriteMemory((DWORD *)(pAddress+1), (LPCVOID)(&pFuncAddress), sizeof(pFuncAddress));
   while (bNops != 0)
   {
      int i = 6;
      WriteMemory((DWORD *)(pAddress+i), (LPCVOID)&Nop, 1);
      ++i;
      --bNops;
   }
}



....................
    WriteFunctionHook((BYTE *)0x8F0E36, (DWORD *) CancelHook, 2);
........................

Далее тело "asm", которое собсна и будет врезано в память:

.data
ReturnAddr    dq    005012E4h

.code
CancelHook proc
    lea     eax, [rdx-1]
    cmp     eax, 5
    jg    short Five
    mov     [rsp+98h], eax
    jmp    ReturnAddr
Five:
    mov    eax, 5
    mov     [rsp+98h], eax
    jmp    ReturnAddr
CancelHook endp

end