在(zài )找到IAT之后,我们只需(xū )在其中(zhōng )遍(biàn )历,找到(dào )我们需要的API地址,然(rán )后用我(wǒ )们(men )自己(jǐ )的函数地址(zhǐ )去(qù )覆盖(gài )它(tā ),下(xià )面给出一段对应的源(yuán )码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018