返回这里:
00AB5331 8B0D 60D8AD00 mov ecx, [ADD860]
00AB5337 89040E mov [esi+ecx], eax
00AB533A A1 60D8AD00 mov eax, [ADD860]
00AB533F 393C06 cmp [esi+eax], edi
00AB5342 75 16 jnz short 00AB535A
00AB5344 8D85 B4FEFFFF lea eax, [ebp-14C]
00AB534A 50 push eax
00AB534B FF15 B850AD00 call [AD50B8] ; kernel32.LoadLibraryA
00AB5351 8B0D 60D8AD00 mov ecx, [ADD860]
00AB5357 89040E mov [esi+ecx], eax
00AB535A A1 60D8AD00 mov eax, [ADD860]
00AB535F 393C06 cmp [esi+eax], edi
00AB5362 0F84 AD000000 je 00AB5415 这里改jmp
00AB5368 33C9 xor ecx, ecx
00AB536A 8B03 mov eax, [ebx]
00AB536C 3938 cmp [eax], edi
00AB536E 74 06 je short 00AB5376
00AB5370 41 inc ecx
00AB5371 83C0 0C add eax, 0C
但是运行后,仍然无法得到正确的IAT,这是为什么?
[课程]Linux pwn 探索篇!