dev: notifying on-enter-process funcptr

[v2y]

I use injectdll for development purpose, like IAT manipulating.
Sometimes I want to be notified on-enter-process-entrypoint.

// hmm what should I say additionally...?

[tzuk]

I'm not sure I understand your question. Your DllMain function is called when your DLL is loaded into the process, during start-up. Optionally, your InjectDllMain function can also be called.

http://www.sandboxie.com/index.php?InjectDll

Note that in version 3.45, your DllMain/InjectDllMain will be called before the first static import DLL is even loaded. And you can install callbacks for DLL loading/unloading. Perhaps this already make things better for you? You can read some more about this here:

http://www.sandboxie.com/phpbb/viewtopic.php?t=7513

[v2y]

Oh, I see with topic#7513.
My DLL is coded as "hooks exe entry, patch exe's IAT, goback entry".
I'll try re-coding with RegisterDllCallback(), it may help.