madshi.net

Hmmm, have you tried modifying the VMT directly instead of using HookCode() in the case of IFileDialog? In other words, replacing the method address pointer in the virtual method table (VMT) instead of overwriting the method address in memory at the prologue (first few binary bytes, which HookCode ...

But, how do you even know that an instance of IFileDialog is even being instantiated? I am using API monitor tool ( http://www.rohitab.com/apimonitor ) to trap the calls of CoCreateInstance. I am getting CoCreateInstance for IFIleDialogue in office 365. One thing which I also noticed is that hook o...

I tried to hook CoCreateInstance from Ole32.dll by calling HookApi but it failed with error -> Failed to install hook. NTSTATUS: 0x770002 Description: ole32.dll@CoCreateInstance . This only happens on machine with MS office 365. Hook is successful on machine with office 2016 / 2013. I also tried to ...

Hello Madshi, I am facing same issue in office 365 on using HookAPI (error code : 0x770002). If I use HookCode hook is getting Installed successfully and working for maximum calls but for File Save Dialogue my callbackFunc is not getting called. Same code is working properly on office 2016 msi. Thanks