在找到(dào )IAT之后(hòu ),我们只需在其中(zhōng )遍历,找到(dào )我们(men )需要的API地(dì )址(zhǐ ),然(rán )后用我(wǒ )们自己的(de )函数(shù )地(dì )址(zhǐ )去覆(fù )盖它,下(xià )面给(gěi )出一段对应的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018