Hi,

Is there any other way to find if a specific module is loaded than using EnumProcessModules() and GetModuleFileNameEx() ?

it seems that my CreateProcessW hook is randomly faling because of the LoadLibrary() I call in the target process remotethread.

So I need to be sure 100% that kernel32.dll is loaded.

If I sleep some time before, it works ...

In WinXP and Win2K kernel32.dll is mandatory[1], apps can't run without it. It is guaranteed to be loaded at all times.

[1] In Win2K you can leave kernel32 out of the import table and the loader will still load the DLL. In WinXP you must include kernel32 in the import table else the app will fail to load.

no no, I know this.

My dll is redirecting CreateProcessW() to MyCreateProcess() => in this new function, I inject the dll in the target process (see my previous topic to know why).

I randomly fails to inject because of the remotethread that is executing the LoadLibrary() in order to load the DLL. If I put a sleep it works correctly so I assume kernel32 is not loaded in the target process when I try to inject the DLL, I dont see any other issue !

Try WaitForInputIdle

If you are the Lord, shouldn't we be asking you questions? hehe, just joking, no offense

You reversed the facts about Win2k and WinXP.

Okay, thanks for spotting that. My bad.

gonna try this one thanks

hi,

Just a quick up to confirm the WaitForInputIdle() works like a charm, thx revolution.

Nice to know that function is useful for something.