在找到IAT之后,我们只需(xū )在其中遍历,找到我(wǒ )们需(xū )要(yào )的API地址(zhǐ ),然后用(yòng )我(wǒ )们自己(jǐ )的函数(shù )地(dì )址去覆盖(gài )它,下面给出一(yī )段对(duì )应(yīng )的(de )源码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018