| 摘要 |
<p>The invention relates to a method for rounding a hook and a device. The method comprises as follows: loading another image of a program module in a memory under the situation of the original image of the existing program module in the memory; calculating the base address difference between the other image and the original image; and calculating the sum of the address of the function of the original image and the plot difference and using the sum as the address of the function of the other image. The invention rounds the hook of a rogue program or other programs in the original image of the program module by loading the other image of the program module and transferring the function in the other image.</p> |
