Function has been IAThook
Diagram is PCHunter get to address
Advice on how to get after being IATHOOK function of the original address?

CodePudding user response:

The

refer to the original poster leijianmo1413 response:

Function has been IAThook
Diagram is PCHunter get to address
Advice on how to get after being IATHOOK function of the original address?

Search keywords: memory load, redirect
Can bypass all ring3 HOOK

CodePudding user response:

WinAPIOverride http://jacquelin.potier.free.fr/winapioverride32/

CodePudding user response:

Try the GetProcAddress call

CodePudding user response:

Is the GetProcAddress call