在找(zhǎo )到(dào )IAT之后(hòu ),我们只需在其中(zhōng )遍历(lì ),找到(dào )我们(men )需要的API地(dì )址,然(rán )后用我们自己(jǐ )的(de )函数地(dì )址去覆盖它(tā ),下面给(gěi )出一段对(duì )应的源(yuán )码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018