Перехват (хук) функции

#include <iostream>
#include <Windows.h>
int sum(int a, int b)
{
    return a + b;
}
 
int main()
{   
    std::cout << "addr: 0x" << std::hex << &sum << std::endl;
    while (true)
    {
        if (GetAsyncKeyState(VK_F2))
        {           
            std::cout << sum(4, 5) << std::endl;            
            Sleep(500);
        }
    }
    system("pause");
    return 1;
}

#include <windows.h>
 
void DoHook(DWORD* Address, DWORD* Hook) {
    
    DWORD OldProt;                          //-5 is there because the offset bytes of the jump instruction are relative to the address of the jump instruction, so the 5 bytes (length of the jump instruction) must be subtracted
    DWORD HookOffset = (DWORD)Hook - (DWORD)Address - 5;                // calculate the offset bytes and store the result into hookoffset
    VirtualProtect((void*)Address, 40, 0x40, &OldProt);                 // change the memory protection and give us write access.
    char* CharPointer = (char*)Address;     // sizeof(char) == 1, 0E9h == 1, we need a char for the size
    *CharPointer = '\xE9';                  // *CharPointer(Sleep()) now equals E9h (the jump opcode)
                                            // we now need to place the operands                        
    CharPointer++;                          // the size problem again, incrementing Address (Address++) would result in the pointer advancing 4 bytes
    Address = (DWORD*)CharPointer;          // Advance the pointer with 1 byte to where the offset bytes need to come
    *Address = HookOffset;                  // the correct offset 
    VirtualProtect((void*)Address, 40, 0x40, &OldProt);      // change the memory protection back to the old values (it doesn't really matter if we do this or not, but it's just proper)
    return;                       // the hook is set!
}
 
int Hooked_sum(int a, int b)
{   
    return 1337;
}
 
 
BOOL APIENTRY DllMain(HINSTANCE hDll, DWORD callReason, LPVOID lpReserved)
{
    if (callReason == DLL_PROCESS_ATTACH)
    {
        DWORD* AddressOfSum = (DWORD*)0xfa510b0;
        DoHook(AddressOfSum, (DWORD*)&Hooked_sum);
    }
    return 1;
}

VOID WINAPI Hooked_SleepEx(_In_ DWORD dwMilliseconds, _In_ BOOL bAlertable)
{
    MessageBox(NULL, "Not sleeping!", "SCHiM", MB_OK);// Будет вызываться когда игра вызовет SleepEx
    return;
}
 
BOOL APIENTRY DllMain(HINSTANCE hDll, DWORD callReason, LPVOID lpReserved)
{
    if (callReason == DLL_PROCESS_ATTACH)
    {
        DWORD* AddressOfSleep = (DWORD*)GetProcAddress(GetModuleHandle("Kernel32.dll"), "Sleep");
        DoHook(AddressOfSleep, (DWORD*)&Hooked_SleepEx);
    }
    return 1;
}