在找到IAT之后(hòu ),我(wǒ )们只(zhī )需(xū )在(zài )其中遍历(lì ),找到我(wǒ )们需(xū )要的(de )API地址,然后用我们自(zì )己的函(hán )数(shù )地址去覆盖它(tā ),下面给(gěi )出一段(duàn )对(duì )应的源(yuán )码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018