在找到(dào )IAT之(zhī )后(hòu ),我们只(zhī )需在其中遍(biàn )历(lì ),找(zhǎo )到(dào )我们需(xū )要的API地址,然后用我们自己的函数地址去(qù )覆盖它,下面给(gěi )出一(yī )段(duàn )对(duì )应的(de )源码(mǎ ) procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018