在找(zhǎo )到(dào )IAT之后(hòu ),我们只需(xū )在其中(zhōng )遍历(lì ),找(zhǎo )到我们需要(yào )的(de )API地址,然后用我(wǒ )们自(zì )己(jǐ )的函数地(dì )址(zhǐ )去(qù )覆盖它,下面(miàn )给出一段对应的(de )源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018