在找到IAT之后(hòu ),我们只需(xū )在(zài )其中遍(biàn )历(lì ),找到(dào )我(wǒ )们需要(yào )的(de )API地(dì )址,然后(hòu )用我们自己的函数地(dì )址去覆(fù )盖它,下(xià )面给(gěi )出一段对应(yīng )的源(yuán )码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018