在找到(dào )IAT之(zhī )后,我(wǒ )们(men )只(zhī )需在其中遍(biàn )历(lì ),找(zhǎo )到(dào )我们需(xū )要(yào )的API地址,然后用我们自(zì )己的函数地址(zhǐ )去覆盖它(tā ),下面给出一(yī )段对应的源(yuán )码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018