C / C++ / MFC

<br />
IMAGE_DOS_HEADER * <br />
dosheader=(IMAGE_DOS_HEADER *)hMod;<br />
<br />
IMAGE_OPTIONAL_HEADER * opthdr =<br />
  (IMAGE_OPTIONAL_HEADER *) ((BYTE*)hMod+dosheader->e_lfanew+24);<br />
<br />
IMAGE_IMPORT_DESCRIPTOR <br />
*descriptor=<br />
      (IMAGE_IMPORT_DESCRIPTOR *)(BYTE*) hMod +<br />
      opthdr->DataDirectory[ IMAGE_DIRECTORY_ENTRY_IMPORT]. <br />
VirtualAddress;<br />
<br />
while(descriptor ->FirstThunk)<br />
{<br />
    char*dllname=(char*)((BYTE*)hMod+ descriptor ->Name);<br />
<br />
    IMAGE_THUNK_DATA* thunk=( IMAGE_THUNK_DATA*)((BYTE*) hMod +<br />
                                 descriptor ->OriginalFirstThunk);<br />
<br />
    int x=0;<br />
    while(thunk->u1.Function)<br />
    {<br />
        char*functionname=(char*)((BYTE*) hMod +<br />
                ( DWORD)thunk->u1.AddressOfData+2);<br />
<br />
        DWORD *IATentryaddress=( DWORD *)((BYTE*) hMod +<br />
                descriptor->FirstThunk)+x;<br />
        x++; thunk++;<br />
    }<br />
<br />
    descriptor++;<br />
}<br />
<br />
struct RelocatedFunction{DWORD proxyptr;<br />
DWORD funtioncptr;char *dllname;char *functionname;};<br />
<br />
BYTE* ptr=(BYTE*)HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,32);<br />
RelocatedFunction * reloc=(RelocatedFunction*)&ptr[6];<br />
DWORD addr=(DWORD)&ProxyProlog;<br />
reloc->proxyptr=addr;<br />
reloc->funcname= functionname;<br />
reloc->dllname=dllname;<br />
memmove (&reloc->functionptr, IATentryaddress,4);<br />
ptr[0]= 0xFF; ptr[1]= 0x15; memmove(&ptr[2],&reloc,4);<br />
DWORD byteswritten;<br />
WriteProcessMemory(GetCurrentProcess(),IATentryaddress,&ptr,4,&byteswritten);<br />