在找到IAT之(zhī )后,我们只需在(zài )其中(zhōng )遍历,找(zhǎo )到(dào )我们(men )需要(yào )的API地(dì )址,然后(hòu )用我们自己的函数地(dì )址(zhǐ )去(qù )覆(fù )盖它,下面给(gěi )出(chū )一(yī )段对应的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018