madshi.net

i am sorry for my inconsiderate words. i will try some codes for crash or terminate environment. thanks for reply

it is a mini dll, only recv user downloading file, and notify my service for virus scan, without any function named UnhookLoadLibrary. i only hook SHFileOperationW in chrome for download protect, and the dead lock is in madCodeHook's Hooking.cpp. static BOOL UnhookInternal(LPVOID *pNextHook, BOOL do...

system : Windows Version 7601 (Service Pack 1) MP (4 procs) Free x64 call stack like that 0045e348 76f43bd5 ntdll_77450000!NtDelayExecution+0x15 0045e3b0 76f444a5 KERNELBASE!SleepEx+0x65 0045e3c0 6b86f3bb KERNELBASE!Sleep+0xf 0045e950 6b8707df xxxxxxxx!CCodeHook::~CCodeHook+0x4ab 0045e95c 6b86513b x...

thanks for reply

There is a 32bit and 64bit version of the driver. Which version is loaded does *not* depend on the bitdepth of your exe. It only depends on the bitdepth of the OS. If your OS is x64, the 64bit version of the driver is always used, regardless of whether your own exe is 32bit or 64bit. A 64bit OS can...

it is too much works for me make a 64bit process to support both 32 and 64 injection, because my project is too large. i read the sources of driver. it looks like GetRemoteProcAddress works right in 64bit process and just some code like Set32bitNtdllInfo can make it support both 32 and 64. is it unr...