在找到(dào )IAT之后,我们(men )只需在其中遍历,找到我(wǒ )们需要(yào )的API地(dì )址(zhǐ ),然后用我们(men )自己(jǐ )的函数(shù )地(dì )址去(qù )覆(fù )盖(gài )它,下(xià )面给出(chū )一段对应的源码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018