Jeff Bisset

Microsoft

Results 4 comments of


                                            Jeff Bisset

Is it possible to unload a user DLL from a process created by the DetourCreateProcessWithDllEx function?

Yes, this would be by design. The injected dll was loaded as a static dependency of the process exe and cannot be unloaded.

Can I call a function from Exe in the injected function of the dll ?

Seems that you got this sorted out.

Detouring Windows API GetDeviceCaps Function Prevents Programs From Starting

Agreed, looks like the wrong calling convention on DetouredGetDeviceCaps would have been the problem here.

Windows 11 ARM64 Processor x86, x64 COM API Hook Crash.

This may have been fixed with the recent ARM64EC related changes.