在找到IAT之后(hòu ),我们只(zhī )需在其中遍(biàn )历,找到我们需要的(de )API地(dì )址(zhǐ ),然(rán )后用我们(men )自己(jǐ )的函(hán )数地(dì )址(zhǐ )去(qù )覆盖它(tā ),下(xià )面给(gěi )出一段对应的源码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018