UnhookCode thread stopper + example

uall · Post by **uall** » Mon Mar 28, 2005 2:53 pm

our handler is installed for some milliseconds, and i dont think there will be any other handler which is able to handle the privileged function.

but maybe overwriting the call is better, i thought from my point of view as a cheat programmer, it would be to easy to detect ^^

Post by **madshi** » Mon Mar 28, 2005 3:28 pm

Heh...

Well, I don't care that much whether it's easy to detect or not.

But in XP/2003 you can use the new vectored APIs, that should be hard to detect.

Post by **madshi** » Tue Apr 05, 2005 7:32 pm

If anybody is interested, there's a new beta build of madCollection available, with improved multi threading safety:

http://madshi.net/madCollectionBeta.exe

Use the flag "SAFE_HOOKING" to activate the new feature, when calling HookAPI/Code. Right now this new mode is not activated by default, because it's not well enough tested yet.