madshi.net

Hi madshi, Thanks for your answer. In my situation, A.dll would talk to a RPC server to decide which dlls should be loaded. This can vary from time to time. Regardless of invisibility, is creating a secondary thread almost the same as creating a remote thread by MadCHook? Upon receiving a unload sig...

BTW, do I need to call UnhookAPI on every function, or just call FinalizeMadCHook to unhook all APIs in one shot? Thanks!

Hi, I'm using MadCHook driver to inject A.dll into some application. A.dll does nothing but loads B.dll and C.dll dynamically, which actually hook some APIs. As far as I know, I can't use UninjectLibraryW because the driver only knows about A.dll. The only way I can think of is to create a separate ...