在找到(dào )IAT之(zhī )后,我们只需(xū )在其中(zhōng )遍(biàn )历,找到我(wǒ )们需要(yào )的API地址(zhǐ ),然后用我(wǒ )们自己的函数(shù )地址(zhǐ )去覆(fù )盖(gài )它,下(xià )面给出(chū )一(yī )段对应的源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018