4 ms·
A cool addition would be to augment the IAT hook with an option to hook LoadLibrary and GetProcAddress, so that functions imported from delay-loaded DLLs are al
by danra 10y ago
A cool addition would be to augment the IAT hook with an option to hook LoadLibrary and GetProcAddress, so that functions imported from delay-loaded DLLs are also hooked correctly, and so that the IATs of delay-loaded or otherwise dynamically-loaded DLLs would also be hooked.
- corsix 10y agoOr patch the export table of the exporting DLL in addition to the import table of every current importing DLL (as future importing DLLs will look in the export table).