在找(zhǎo )到IAT之(zhī )后(hòu ),我(wǒ )们(men )只(zhī )需在(zài )其(qí )中(zhōng )遍历,找到我们(men )需要的API地(dì )址(zhǐ ),然后用我们自(zì )己的(de )函数地址去(qù )覆盖它,下面(miàn )给(gěi )出一段对应的(de )源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018