在(zài )找到(dào )IAT之后,我们只需在其(qí )中遍历,找(zhǎo )到(dào )我(wǒ )们需要的API地址,然(rán )后(hòu )用我们(men )自己的函数地址(zhǐ )去(qù )覆(fù )盖(gài )它,下(xià )面给出一段对(duì )应的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018