madshi.net

That error code means "code not interceptable", which means that madCodeHook thinks that it's not safe to hook that code. Can you do this: uses madDisAsm; var as1 : AnsiString; begin ParseFunction(Pointer($0042E843), as1); Then please post the contents of "as1" here. 0042e843 su...

You mean HookCode fails? If so, what does GetLastError say? GetLastError say 7798786 on if not HookCode(Pointer($0042E843), @ConnectKey, @TrampolineNext) then WriteLn(IntToStr(GetLastError)); Using that worked: procedure PatchCode(Address: Pointer; const NewCode; Size: Integer); var OldProtect: DWO...

It works the same way as hooking APIs. Your hook callback function and "next hook" function variable need to have the same calling convention and parameters as the function you want to hook. Have you tried? Does it not work? TrampolineNext : function(var _holdrand: DWORD): DWORD; function...

How use HookCode for specific address? example: $0042E843 and function: function ConnectKey(var _holdrand: DWORD): DWORD; const Key_1 = $2F6B6F5; Key_2 = $14698B7; Key_3 = $27F41C3; Key_4 = $0B327BD; begin _holdrand := ((_holdrand * Key_1 + Key_2) shr $10) * Key_3 + Key_4; Result := (_holdrand shr $...

I'm using the driver to inject the dlls on processes, at the momment i simply do that: if not IsInjectionDriverRunning('TPDemoDriver') then begin if not LoadInjectionDriver('TPDemoDriver', 'PS\PSMG_32.sys', 'PS\PSMG_64.sys') then begin if not InjectLibrary('TPDemoDriver', 'PS\PSMG_32.dll', CURRENT_S...

Is there any way to inject my dlls either using the driver or not in processes that hook up the LoadLibraryA / W and LdrLoadDll apis to prevent dll injections? Because MCH can not inject into processes if they are already open, only if they are executed after the MCH is running.

Found a solution for 32 bits, now looking for 64 bits.

Hello, Could anyone tell me how I can have MCH inject my dll into a process that hooks the LdrLoadDll / LoadLibrary apis to avoid dlls injection? I have paid MCH but I came across this problem, where the InjectLibrary/driver function can not inject my dlls in process who hooks the mentioned apis (Ld...

if i signin my dll you think i will need disable secure boot?

Yeah, my problem its with secure boot. if i signing my code will work without disable secure boot? You know something about comodo code signing https://cheapsslsecurity.com/comodo/codesigningcertificate.html?gclid=CK6DyruSysgCFQ6BkQodTO0GEA i use AppInit_DLLs to load my dlls, but only if secure boot...

That code signing you recommend to use?