在(zài )找到IAT之(zhī )后,我们(men )只(zhī )需在(zài )其中遍历,找(zhǎo )到我(wǒ )们(men )需要的API地(dì )址(zhǐ ),然后用我们自(zì )己(jǐ )的函(hán )数(shù )地址(zhǐ )去覆盖它(tā ),下面(miàn )给出一段对(duì )应的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018