在(zài )找(zhǎo )到IAT之(zhī )后(hòu ),我(wǒ )们只(zhī )需在其中遍历,找(zhǎo )到我们需(xū )要的API地(dì )址(zhǐ ),然后(hòu )用(yòng )我们自己的函数地址去覆盖(gài )它,下面给出(chū )一段对(duì )应的(de )源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018