在(zài )找(zhǎo )到(dào )IAT之后,我们只需在(zài )其中(zhōng )遍历,找到我们(men )需要的API地址(zhǐ ),然后用(yòng )我(wǒ )们(men )自己的(de )函(hán )数地址去覆(fù )盖它(tā ),下(xià )面给出一段对应的(de )源码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018