在找到IAT之后(hòu ),我们只需(xū )在其(qí )中遍历(lì ),找到(dào )我们需要(yào )的API地(dì )址,然后用我们(men )自己的函(hán )数地址(zhǐ )去(qù )覆盖(gài )它,下面给(gěi )出一(yī )段(duàn )对应的源码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018