9

16-Oct-2013: Add import to PE executable file

 4 years ago
source link: https://yurichev.com/blog/76/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client
Add import to PE executable file

16-Oct-2013: Add import to PE executable file

Just wrote an utility I always missed:

PE_add_import is a simple tool for adding symbol to PE executable import table

Sometimes, you may need to replace existing function in binary code by function in your own DLL.

This utility adds yourdll.dll!function import into PE image and writes the following code at the specified point:

MOV EAX, [yourdll.dll!function]
JMP EAX

Usage:

usage: fname DLL_name sym_name sym_ordinal func_address
for example: winword.exe mydll.dll MyFunction 1 0x401122

//yurichev.com/PE_add_import.html

→ [list of blog posts]


report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK