在找到(dào )IAT之(zhī )后(hòu ),我(wǒ )们只(zhī )需在(zài )其中遍(biàn )历,找到我(wǒ )们(men )需要的(de )API地址,然后用我(wǒ )们自己的函数地(dì )址(zhǐ )去覆盖(gài )它,下面给(gěi )出一段对(duì )应(yīng )的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018