远程注入汇编内存加载DLL修改版源码及说明

kernel32 ＝ GetModuleHandleA (“kernel32.dll”)
addr [1] ＝ 取指针地址_字节集型 (#图片1)
addr [3] ＝ GetProcAddress (kernel32, “VirtualAlloc”)
addr [4] ＝ GetProcAddress (kernel32, “RtlMoveMemory”)
addr [5] ＝ GetProcAddress (kernel32, “LoadLibraryA”)
addr [6] ＝ GetProcAddress (kernel32, “GetProcAddress”)
addr [7] ＝ GetProcAddress (kernel32, “VirtualFree”)
fn ＝ 申请内存 (取字节集长度 (shellcode ()), )
写到内存 (shellcode (), fn, )
线程_启动1 (fn, 指针到整数 (取变量地址 (addr)) ＋ 8)