在(zài )找(zhǎo )到(dào )IAT之后,我(wǒ )们只(zhī )需在(zài )其中遍历,找到我们(men )需要的(de )API地(dì )址,然后(hòu )用我(wǒ )们自己(jǐ )的函数(shù )地址去(qù )覆盖(gài )它,下面给出一段对应(yīng )的(de )源码 procedure RedirectApiCall var ImportDescPIMAGE_IMPORT_DESCRIPTOR FirstThunkPIMAGE_THUNK_DATA32 szDWORD
Copyright © 2008-2018