在找到IAT之后(hòu ),我们只需在其中(zhōng )遍(biàn )历,找(zhǎo )到(dào )我们需(xū )要(yào )的API地址(zhǐ ),然后(hòu )用我们自己(jǐ )的(de )函(hán )数地址去覆盖它(tā ),下面给出一段对应的(de )源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018