在(zài )找到(dào )IAT之后(hòu ),我(wǒ )们只(zhī )需在其中遍历,找(zhǎo )到我们需要(yào )的API地(dì )址,然后用我们自己的函数地址去覆(fù )盖它,下面给出(chū )一段(duàn )对应的源(yuán )码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2024