![]() |
|
#6
|
||||
|
||||
|
You can do it also by hooking NtMapViewOfSection and getting name of mapped section, if it matches wanted dll, look in pe header of mapped dll for entrypoint and hook it
That's the simplest way.Somebody in the past also asked how to know when dlls are loaded, and I will also point to same code : http://deroko.phearless.org/itracer.zip <--- look for hook of NtMapViewOfSection. There is detailed code how to find dll name too ![]() As you may see from previous answers, there are many ways to do it
__________________
http://accessroot.com |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Windows Hook | user1 | Source Code | 0 | 04-24-2021 05:23 |
| SST Hook -> Bluescreen!? | Cobi | General Discussion | 12 | 05-04-2005 09:37 |
| SYSENTER hook | niom | General Discussion | 13 | 08-12-2004 02:50 |