在找到(dào )IAT之后,我们只(zhī )需(xū )在(zài )其中遍历(lì ),找到我(wǒ )们需(xū )要的API地址(zhǐ ),然后(hòu )用(yòng )我(wǒ )们自己的函数地址去(qù )覆盖(gài )它,下面给出一(yī )段对(duì )应的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018