Uh, yeah. That too.
;)
-b
On Jul 18, 2006, at 6:04 PM, Chad Boyda wrote:
The CBT hook causes Windows to load the snowflake.dll into the
memory space
of every running process. Once loaded the snowflake.dll detects the
current
process name and if does not match "SECONDLIFE.EXE" it removes
itself from
memory otherwise it continues to load. Once loaded it rewrites the
import
table of the current process in memory, rerouting the memory
addresses of
externally linked API library calls that SECONDLIFE.EXE uses
through proxy
functions within snowflake.dll.
_______________________________________________
libsecondlife-dev mailing list
libsecondlife-dev@gna.org
https://mail.gna.org/listinfo/libsecondlife-dev
