在找到(dào )IAT之后,我(wǒ )们只(zhī )需在其中遍(biàn )历,找(zhǎo )到我们需要的API地址,然后(hòu )用我(wǒ )们自(zì )己的(de )函(hán )数地址去(qù )覆盖它,下面给出一段(duàn )对应的(de )源码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018