在找到(dào )IAT之(zhī )后,我们只需在其中(zhōng )遍(biàn )历,找到我们(men )需(xū )要的API地(dì )址,然后用(yòng )我(wǒ )们自(zì )己的函数地址去(qù )覆(fù )盖(gài )它,下(xià )面给出一段对(duì )应的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018