madshi.net

My DLL is lightweight, but it requires a number of other system DLLs (ie WinInet.dll) that I don't really want to load into every process. I know that I could change all the static references in my DL ...

pi.id:=MSGTYPE_GETADDRINFO;
lstrcpy(pi.target,nodename);
SendIpcMessage(pchar('ProtexProc'),@pi,sizeOf(pi),@result,sizeOf(result));

Does it crash if y ...

I log messages using SendMessage(WM_COPYDATA, ...) and wrote a viewer app similar to DbgView to receive the messages and display the strings. I could post that, if there's any interest.

The advant ...

Glad it worked for you! I'm no Delphi expert by any means but recently had to struggle through this same issue. wink

So I've plenty of experience using MadCodeHook and Visual C++. I don't know for ...

It's easier to use the fixed character buffer for the answer:

var
TempRules : Array[0..4096] of Char;

begin
SendIpcMessage(IPC_CHANNEL, Msg, StrLen(Msg) + 1, @T ...

You can use Windows Accessibility (SetWinEventHook, EVENT_SYSTEM_MINIMIZEEND).

Alternatively, you can use SetWindowsHookEx() to set a WH_SHELL hook.

-- David

Thanks Madshi.

Usually suspending thread of other unknown processes is very dangerous. You can even end up locking up the whole OS. Is there no other way to realize your aim? What are you trying to achieve?

I hav ...

http://www.joachim-bauch.de/tutorials/load_dll_memory.html seems a good place to start! very happy

Hello,

I want to hook LoadLibrary() to create a HMODULE from something besides a disk file (.dll). The contents of the DLL are not stored in a disk file, instead they are stored in a proprietary h ...

You need to hook gethostbyname(), and getaddrinfo(), and send().

Did you hook the first 2 yet? Sorry, I can't give you example code.

Thanks,
David

SHFileOperation() is used to recycle a file. I'm not sure there are any more API's that also do, so hooking an Nt() function as suggested may be more reliable.

-- David

One of the disadvantages of MadCodeHook's IPC is the performance. Madshi was supposedly working on a speed up implementation. How is that going?

Thanks,
David

Does Vista64 block hooking the NTDLL e.g. NtCreateProcess()? If allowed, I would think this would be the most reliable, since all? process creation calls go through this one?

Thanks,
David

If you use ShellExecuteEx() to launch the app, you can do so on a separate thread. Use the SEE_MASK_NOCLOSEPROCESS flag so that the hProcess of the launched app is returned to you. Then do a

...