How can I hook DllMain ?

		Exetools > General > General Discussion
How can I hook DllMain ?

01-19-2015, 01:29

Carbon

VIP

Join Date: Sep 2013

Posts: 113

Rept. Given: 7

Rept. Rcvd 189 Times in 48 Posts

Thanks Given: 0

Thanks Rcvd at 60 Times in 19 Posts

I think the function is called LdrpCallInitRoutine. Just hook it. You can get the address from NTDLL debug symbols.

Code:

BOOLEAN NTAPI LdrpCallInitRoutine 	( 	IN PDLL_INIT_ROUTINE  	EntryPoint,
		IN PVOID  	BaseAddress,
		IN ULONG  	Reason,
		IN PVOID  	Context 
	)

__________________
My blog: https://ntquery.wordpress.com

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

All times are GMT +8. The time now is 20:37.