在找到(dào )IAT之后,我们(men )只需在(zài )其中遍历,找到我们(men )需要的API地(dì )址(zhǐ ),然后用(yòng )我们(men )自(zì )己的函(hán )数地(dì )址去覆盖(gài )它,下面(miàn )给出一段对(duì )应的(de )源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018