从内存启动dll和exe（汇编源码）

8870188

外送一个自己写相关函数

;mov ebx,Base
;call FixIat
;Code By y3y3y3

FixIat proc
pushad
pushfd
mov eax,[ebx+3Ch]
lea eax,[ebx+eax];Pe
mov eax,[eax+80h]
lea esi,[ebx+eax];Iat
.repeat
xor edi,edi
.repeat
mov eax,[esi+10h]
lea eax,[ebx+eax]
mov eax,[eax+edi*4]
lea edx,[ebx+eax+2]
mov eax,[esi+0Ch]
lea eax,[ebx+eax]
push edx
invoke LoadLibrary,eax
push eax
call GetProcAddress
mov ecx,[esi+10h]
lea ecx,[ebx+ecx]
mov [ecx+edi*4],eax
inc edi
.until dword ptr [ecx+edi*4] == 0
add esi,14h
.until dword ptr [esi] == 0 && dword ptr [esi+0Ch] == 0
popfd
popad
ret
FixIat endp

游客，如果您要查看本帖隐藏内容请回复