1. 内容

2. 介绍

3. 挂钩方法

3.1 运行前挂钩

3.2 运行时挂钩

3.2.1 使用IAT挂钩本进程

3.2.2 改写入口点挂钩本进程

3.2.3 保存原始函数

3.2.4 挂钩其它进程

3.2.4.1 DLL注入

3.2.4.2 独立的代码

3.2.4.3 原始修改

4. 结束语-1. Content 2. Introduction 3. Linked to the former method of operation linked 3.1 3.2 Runtime 3.2.1 to enable linking IAT linked with the process of rewriting the point of entry 3.2.2 linked to the process of preserving the original function 3.2.3 3.2.4 linked to other DLL injection process 3.2.4.1 3.2.4.2 3.2.4.3 independent of the original code amendments changed four. Concluding remarks