在找到IAT之后,我们(men )只需(xū )在其中遍历(lì ),找到(dào )我们(men )需要的API地址(zhǐ ),然(rán )后(hòu )用(yòng )我们自己的函数(shù )地址去覆盖它,下(xià )面给出一(yī )段对应(yīng )的源(yuán )码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018