Click here to Skip to main content
15,867,453 members
Everything / Hooking

Hooking

hooking

Great Reads

by stevemk14ebr
PolyHook v2 - the C++17 x86/x64 library supporting multiple methods of hooking
by Apriorit Inc
Being able to switch between 32-bit and 64-bit modes in Windows is a useful skill. Learn about the heaven’s gate technique and the tools and methods needed for hooking 64-bit processes from the 32-bit WOW64 mode.
by Apriorit Inc, Artur Bulakaiev
Learn how was increased mhook’s performance, enhanced its capabilities and eliminated certain bugs.
by Member 13737597
This article shows you how to implement trampolines on x64, introduces the idea of sync and async hooks, and dynamically added runtime filters and loggers.

Latest Articles

by Apriorit Inc
Being able to switch between 32-bit and 64-bit modes in Windows is a useful skill. Learn about the heaven’s gate technique and the tools and methods needed for hooking 64-bit processes from the 32-bit WOW64 mode.
by Apriorit Inc, Sergey Stepanchuk
Learn how you can use ftrace to hook critical function calls in the Linux kernel
by Apriorit Inc
In this article, we focus on the main ftrace pros and cons and describe some unexpected surprises we’ve faced when hooking Linux kernel functions with this utility.
by Apriorit Inc
Two theoretical ways to protect a Linux kernel module from hooks.

All Articles

Sort by Score

Hooking 

24 Jul 2018 by stevemk14ebr
PolyHook v2 - the C++17 x86/x64 library supporting multiple methods of hooking
23 Mar 2020 by Apriorit Inc
Being able to switch between 32-bit and 64-bit modes in Windows is a useful skill. Learn about the heaven’s gate technique and the tools and methods needed for hooking 64-bit processes from the 32-bit WOW64 mode.
4 Oct 2018 by Apriorit Inc, Artur Bulakaiev
Learn how was increased mhook’s performance, enhanced its capabilities and eliminated certain bugs.
8 Nov 2018 by Member 13737597
This article shows you how to implement trampolines on x64, introduces the idea of sync and async hooks, and dynamically added runtime filters and loggers.
6 Jun 2013 by Sergey Alexandrovich Kryukov
Please see my comments to the question and think about it.For first step, please try the following: instead of "printing some messages", do the following: send Beep to the speaker (first, make sure it works in a "normal" application), something like:#include...
13 Nov 2017 by Dave Kreskowiak
All it means is that any messages your hookProc code gets passed into it should be passed to the next hook in the chain using CallNextHookEx. You can find an example of that here[^] in globalKeyboardHook.cs. Usually, you don't modify the values you get passed into your hookProc, but there's...
4 Nov 2012 by pasztorpisti
Besides global hooks its a good practice to use a driver, but there are so many points where you can put your filter in. More these: http://www.securelist.com/en/analysis/204792178/Keyloggers_Implementing_keyloggers_in_Windows_Part_Two[^]Alternatively:...
2 Feb 2013 by debdipta_ghosh
Hi, I want to hook all info related to printer and what was printed, i.e I actually want to hook Spooler?Any idea what to be sent to "SetwindowHookEx"?Thanks
6 Jun 2013 by szabolcsx
Hi. At first sorry for my English.I have a problem with keyboard hooking. I made a small program that hooks the keyboard. It works in my computer, but if I run on another computer it works only if the application's window is focused. I found a lot of topics with this question, but none of...
3 Aug 2013 by Sergey Alexandrovich Kryukov
Please see my recent answer: How to set a window hook in other application?[^].—SA
24 Mar 2014 by Dave Kreskowiak
Considering that's a product you have to pay for to get the library, nobody is going to hand over their copy of it.
27 Aug 2014 by Dave Kreskowiak
None. No such "hook" exists.Opening a file in an application is not some mystical thing. It happens all the time, system wide, not just when you double-click something.
27 Aug 2014 by Zoltán Zörgő
In your question you speak about "hooking" on opening files, but afterwards you speak about detecting windows. These are different things..Well, you might not be able to detect all events, if they are transient, but might be one approach periodically walking trough open file handles, see for...
6 Sep 2015 by Wendelius
This article would probably help you: Processing Global Mouse and Keyboard Hooks in C#[^]. Even though it has very little explanation, it looks like what you're searching for.
4 Mar 2019 by F-ES Sitecore
You won't get this working as services have their own separate desktop\user session from the logged in user so your service code can't access anything on the interactive desktop such as mouse and keyboard events. It works fine from your application as your application is running as your...
16 Sep 2019 by Richard MacCutchan
It is all described at Hooks Overview - Windows applications | Microsoft Docs[^].
21 Jun 2020 by Member 3017361
I hit the same problem: took a day of debugging what to hook. If you want to hook the registry access -- you need to snag the versions in kernelbase.dll not advapi32.dll or kernel32.dll. Otherwise some things will hook, but others, like...
8 Feb 2023 by Dave Kreskowiak
Your code, running as your account, cannot intercept calls being made by another account, or an elevated account. This is for security reasons. Think about it. Would you want some schmuck user intercepting code running as administrator and...
15 Oct 2012 by PrafullaVedante
Why dont you try packet sniffing. Protocol used by most of the chat clients are known, you can decode it to get the message. There are readymade softwares are available, e.g. ArcMentor (I was working on this at my previous organization ;) )
2 Nov 2012 by Richard MacCutchan
Try this sample[^]. I do not think that DWORD is defined in any of the Linux C/C++ headers, but you can add it yourself quite easily.
5 Nov 2012 by lilyNaz
Hi,I wrote a driver which hooks ZwQueryDirectoryFile and hides a file, "o.txt", but when I access "o.txt" directly using its name (which of course I know), for instance, when I try to delete it in command Prompt using >del o.txt ,the system crashes and I see the blue screen. What should...
5 Nov 2012 by Barakat S.
You should start learning how to debug your driver and do driver crashes analysis. A good place to start with: http://www.dedoimedo.com/computers/windows-bsod.html[^]. You will find many articles, technics and tools there on the Internet regarding this topic.
6 Nov 2012 by Abhineet Ayan Verma
I am trying to write some codes for detecting the user-mode hooks. Would you please guide me through the steps and ways to detect hooks. Till now I have tried enumerating all the running processes and enumerating the modules for each of the process. I read somewhere to compare the in-memory...
7 Nov 2012 by JackDingler
There are no quick answers for this one.I could post google links for you, but I'd bet that, you've been there, done that.I'd start with getting a good understanding of how user hooks work.
3 Dec 2012 by jamescaunt
Hi, im trying to disable user input using global system hooks. heres some of my code. my understanding is mouse input should be disabled as it is not passed down after PlaybackMouseHook is called. However when i run this code, i can still move the mouse. It looks as if the hook works for a bit...
5 Jan 2013 by lilyNaz
I need to stop processes which are trying to inject DLL. I know that CreateRemoteThread and SetWindowsHookEx are used by malwares to do so. What Functions in kernel mode, in my driver, do I have too hook,SSDT Hooking, in order to prevent these processes from injecting dlls?Is there any other...
7 Jan 2013 by analogx
i have written application for WH_SHELL and WH_CBT hooking,the problem with this application is that i'm able to hook window created messages but for window destroy messages my application just crashes,if i comment the window destroy code the application works fine,i have google it and found no...
10 Jan 2013 by analogx
HEY finally found a work around,instead of hooking HSHELL_WINDOWDESTROY message i just use the handle returned from HSHELL_WINDOWCREATED to get the process id using which i could get the handle to process,i stored the process id,handle to process in a singly link list and then wrote a checking...
2 Feb 2013 by debdipta_ghosh
I want to Hook "StartDocPrinter" api (http://msdn.microsoft.com/en-us/library/windows/desktop/dd145115(v=vs.85).aspx[^])Any idea or article how to hook a api?thanks
2 Feb 2013 by Abhishek Pant
hi,This may help you a little-EasyHook - The reinvention of Windows API Hooking[^]
20 Feb 2013 by Kucera Jan
Hi,I would recomend using a sniffer. If you want to use existing application you can use Ethercap or Wireshark or TCPDUMP.If you, though, want to implement your own sniffer, you shall study LIBPCAP libreary.Best RegardsJ. K.
24 Feb 2013 by marwen109
According to this article, i'm looking for an idea to protect browser from this attack, it's called en.wikipedia.org/wiki/Form_grabbing , the malware hook the API call of the browser when he send the request and before its encrypted with(HTTPS/SSL)..I don't know if just sandboxing the browser...
24 Feb 2013 by Sergey Alexandrovich Kryukov
The sandboxing is not a solution. You can consider a sandbox as a separate system isolated from your host system. If something bad happens to the sandbox, it won't infect the host system or damage it otherwise. In other words, a sandbox is a method to try something risky or questionable without...
8 Apr 2013 by Varun Pandey
Hey Guys,I am stuck. For some reason, I need to block Copy feature of the file system on Windows 8. Till Windows 7, ShFileOperation & CopyFile used to do trick. However, with Windows 8, as I could scan through API monitor, a new API: CopyFile2, has been used to do the job. So I need to...
9 Apr 2013 by The_Inventor
You are missing something, as CopyFile2 looks like:HRESULT WINAPI CopyFile2( _In_ PCWSTR pwszExistingFileName, _In_ PCWSTR pwszNewFileName, _In_opt_ COPYFILE2_EXTENDED_PARAMETERS *pExtendedParameters);HRESULT (WINAPI *Trampoline_CopyFile2(PCWSTR...
10 May 2013 by Sergey Alexandrovich Kryukov
In case you don't know yet: this is related to this Windows API function: http://msdn.microsoft.com/en-us/library/windows/desktop/ms644990%28v=vs.85%29.aspx[^].See also: http://msdn.microsoft.com/en-us/library/windows/desktop/ms644959%28v=vs.85%29.aspx[^].As to the samples, now when you...
5 Aug 2013 by wladimirbm
Hello, i have scanner 2d honeywell xenon 1900, it work like hid-keyboard.in my program i use hooker for keyboard, which intercept press keys on keybordand when i press on keyboard in english layout - hooker understand virtual_code and scan_code of keysbut when qr code consist english...
13 Aug 2013 by Sergey Alexandrovich Kryukov
First, you can use the Microsoft MEF framework:http://en.wikipedia.org/wiki/Managed_Extensibility_Framework[^],http://mef.codeplex.com/[^],http://msdn.microsoft.com/en-us/library/dd460648%28VS.100%29.aspx[^].You can do it yourself, especially if you need it as simple as you really...
6 Dec 2013 by Member 10436245
The following code hooks successfully of all open windows and applications on my desktop:IntPtr hInstance = LoadLibrary("User32.dll");callbackDelegate = new HOOKPROC(HookCallback);hhook = SetWindowsHookEx(WH_KEYBOARD_LL, callbackDelegate, hInstance, 0);However, I would like to hook to...
6 Dec 2013 by Dave Kreskowiak
No, there is no way to get messages directed at a specific application. Your hook code sits between the keyboard driver and the control with the input focus. Notice that there is no destination information in the data that is passed to your hook code. You have no idea where it's going and no...
19 Jan 2014 by User 9296355
I am using SetWindowsHookEx() function for installing a keyboard hook for my remote desktop application in C#. I am using Windows Form Application on Visual Studio 2010, 32 bit Win 8.1. My code to start the hook isprivate void Start(){ IntPtr handle =...
18 Jan 2014 by Raul Iloc
The last parameter should be: AppDomain.GetCurrentThreadId()
17 Feb 2014 by gautam05
I am working on a Windows application developed in C#. The Windows application is required to capture the user inputs from Internet Explorer. For example, when user clicks on “Submit” button in the browser, the Windows application should be able to capture that event and also capture the text...
25 Mar 2014 by CHill60
From Desaware.http://www.desaware.com/purchase/index.aspx[^]
17 Apr 2014 by Sergey Alexandrovich Kryukov
Bad idea. In general case, this is impossible. The processes are designed to be isolated, to minimize possible intervention from other processes, eliminate clashes in memory (each process is executed in a separate memory space, which is based on hardware isolation of memory).In some cases,...
20 May 2014 by bling
This article has some useful information on creating a DLL that loads into each applications's address space. The article is a bit dated in that the advice on creating a shared section of memory doesn't work with Windows Vista and later.Hooks and DLLs[^]The key is - I think - the...
4 Sep 2014 by liutaoxwl
i want to get a image when user print from other applications.then i hook some api.first i hooked createdcw and in my hook funciton, i create a memory dc(by CreateCompatibleDC(NULL) ) and return. but the target application show a error.then, i in my createdcw i create both printer...
13 Dec 2014 by Sergey Alexandrovich Kryukov
There cannot be an "easy tutorial" because of one very obvious reason: Window hooks are not easy to work with, notoriously hard to debug, and so on. Chances are, the easiest tutorials would be the worst, in terms of getting to the results you want. And I don't recommend doing the works you...
23 Dec 2014 by hiroyukki
I encountered the same problem when I writing printer content monitor.I hooked StartDocW EndDoc StartPage EndPage and hook many GDI APIS (DrawTextExA, FillRect ...)when StartDocW occured.I tee gdi actions to emf file to get the printer content. It works ok usually, but as same as your...
13 Jun 2015 by Zon-cpp
Hi,I have a problem to use a managed dll (is built by C#) in a native VC++ code.I can't fire the events of that dll in my VC++!I Registered that dll and import it in VC++ by:#import "..\..\EventDll.tlb" raw_interfaces_onlyand I call other functions of that dll...
18 Jul 2015 by hassan_sayfi69
HiHow can I get Thread Id from its handle in NtCreateThread(&ThreadHandle) system call or NtCreateThreadEx(&ThreadHandle, ...)?I try to load thread's information by calling NtQueryInformationThread but this system call fails with ambiguous error code. Now I need a solution to get an ID of...
2 Aug 2015 by migurazi
I write vc++ code with flash.I want to hooking flash because mouse right button operation and flash's transparent.In my code, use flash32*.ocx or flash64*.ocx (Active-X) reference code :1. 플래시콘 컨트롤 (FlashconAxWindow) | 마을 :: 컨텐츠 상세보기 (korean. sorry^^)2. Another new thunk...
8 Aug 2015 by Member 11895995
Hi,I am attempting to peek into a casino game window to see what is happening inside the thread of the PTIODEVICE by using something along the lines of a windows hook.After googling about "Class: PTIODEVICE" i've discovered that there is a hierarchy below the top level Class...
8 Aug 2015 by Member 11895995
ok I figured out that I just needed to enumerate the child windows to find the handle of the INTERNET EXPLORER_SERVER
9 Oct 2016 by Aner Izraeli
I have created a c# program which gets new loaded processstartWatch.EventArrived += new ventArrivedEventHandler(startWatch_EventArrived);and doing stuff when eventHandler fire.afterwards im using:foreach (var runningProcess in Process.GetProcessesByName(ShortProcessName))to get...
9 Oct 2016 by Wendelius
If I understand the question correctly you could utilize the idea from Listing Used Files[^] Another option could be to use an utility like handle.exe. See https://technet.microsoft.com/en-us/sysinternals/handle.aspx[^]
9 Oct 2016 by Kornfeld Eliyahu Peter
I do not think you can tell why a process opened a file, but can tell the files the process currently holds open...First of all you have to dig into old WIN32 APINtQuerySystemInformation[^]This function is not much documented and the help page will not contain the SystemHandleInformation...
27 Nov 2016 by Aner Izraeli
im using ms-detours to hook functions. im successfully injecting my dll to a process. im successfully catching functions of createfile\deletefile and event see them at "debugView".im unable to catch all registry functions.tried:REGSETVALUEX OrigRegSetValueEx = NULL;REGOPENKEYEXA...
27 Nov 2016 by Arthur V. Ratz
I've just reviewed your code and this all seems to me a kind of strange. I'd recommend you to read this article API Hooking with MS Detours
25 Oct 2017 by Roger1990
Hi All, I am capturing the count of PointerDown and PointerUp touch events, using global hook 'WH_GETMESSAGE'. For every PointerDown touch, I am supposed to get one PointerUp touch. But in case of touch events inside google chrome or firefox, I am getting 2 pointerUp events for 1 pointerDown...
13 Nov 2017 by Roger1990
I found this extract in the 'remarks' section of the documentation for SetWindowsHookEx function ("https://msdn.microsoft.com/en-us/library/windows/desktop/ms644990(v=vs.85).aspx"): "To hook all applications on the desktop of a 64-bit Windows installation, install a 32-bit global hook and a...
27 Mar 2018 by Roger1990
I am trying to call the GetPointerFrameInfo function to get the pointer count but the function seems to fail with Error 5 (Access Denied). Any idea why that is happening and how I can resolve it? I am trying to call the same inside the hook procedure GetMsgProc as mentioned in the 'What have...
27 Mar 2018 by KarstenK
Access denied is often the cause when the call needs elevated right. Try to run the code with administrator rights. The same error is typical when the pointer is from another thread.
9 Jan 2019 by Apriorit Inc
Two theoretical ways to protect a Linux kernel module from hooks.
17 Jan 2019 by Apriorit Inc
In this article, we focus on the main ftrace pros and cons and describe some unexpected surprises we’ve faced when hooking Linux kernel functions with this utility.
22 Jan 2019 by Apriorit Inc, Sergey Stepanchuk
Learn how you can use ftrace to hook critical function calls in the Linux kernel
23 Oct 2019 by Member 14631177
I'm attempting to make Detours hooking on CreateFile() by calling notepad.exe. Starting withdll /d:HookProject.dll "C:\Windows\System32\notepad.exe" in command prompt, I don't see any traceable dll hook application, but only DLLMain() call from ntdll.dll module (my tracing tool is API...
23 Oct 2019 by RickZeeland
Maybe this CodeProject article will clear things up: API Hooking with MS Detours[^] Also see: MinHook - The Minimalistic x86/x64 API Hooking Library[^]
29 Aug 2021 by Volga_
Hi everyone, I try to do local hook to writing window on NotePad, my code is: #include HHOOK keyboardHook; LRESULT CALLBACK KeyboardProc(int nCode, WPARAM wParam, LPARAM lParam) { if (wParam == WM_KEYDOWN && nCode == HC_ACTION)...
28 Aug 2021 by Rick York
I don't have an answer for you but there many articles on the topic of hooks at this site. Hopefully one of them will be of use to you. Are are links to a few of them : API hooking revealed[^] Mouse and KeyBoard Hooking utility with VC++[^]...
2 Dec 2021 by Avtem
I wrote a DLL with hook of type WH_GETMESSAGE. What I want to do is store an std::vector inside that DLL and being able to manipulate it from my app. But the problem is that when my app calls DLL function createMyObjects() vector's size...
2 Dec 2021 by Rick York
Hook procedures are called in the context of the process that generates the message. Here is what the docs (Hooks Overview - Win32 apps | Microsoft Docs[^]) say on the topic : Quote: A global hook monitors messages for all threads in the same...
19 Sep 2022 by Member 15635207
Hello Folks, It is possible to hook 32 and 64 bit Windows API's from kernel mode? Any references will be helpful. If there any such kernel drivers , commercial or non-commercial, please do share - viks What I have tried: Tried google, and...
19 Sep 2022 by Dave Kreskowiak
It sounds like what you're looking for is "Detours"[^]
8 Feb 2023 by Ṉobody
I am creating an application where I use EasyHook to hook into the explorer.exe process and listen for the CreateProcessW method call from kernel32.dll. The program intercepts CreateProcessW only if the user runs the file by double-clicking on it...
16 Mar 2023 by 11_
I'm having an issue whereby I've setup a keyboard hook in my application that works perfectly from both within my app and when any other app is in the foreground. I have a need to connect to an external MS Access database, but on doing so I...
13 May 2023 by prohetguy
hello, so I was trying to make a program in C# where u send a joystick input to program, what I mean by that is there is no google search on it and I want to know if there is a way to hook a Dll into a program with controller index, as I how many...
17 May 2016 by stevemk14ebr
A modern, universal, c++ hooking library.
27 Jan 2014 by Vít Blecha
How to combine the Raw Input and keyboard Hook APIs, and use them to selectively block input from only some keyboards.
28 Feb 2014 by _Ravikant Tiwari_
This program will demonstrate the process of injecting code into already running processes. Here we have choosen to inject into Explorer
10 Sep 2013 by thatraja
Ask you question there(bottom of that article)[^] for better response.
2 Nov 2012 by DJ Fire-Black
Hi !I have a little function which is used to hook virtual functions under Windows x86.I have to port it or linux x86, I know I have to use mprotect but this is abstract for me, I've searched all the night on google, here and on other site but ... wtf ... no answer at all ?? Linux doesn't...
4 Nov 2012 by Sergey Alexandrovich Kryukov
The solution is using a global Windows Hook; using "global" is an important key. Please see:http://msdn.microsoft.com/en-us/library/windows/desktop/ms632589%28v=vs.85%29.aspx[^].Make sure you don't do evil!—SA
4 Nov 2012 by Barakat S.
Here is a simple keylogger I wrote a while ago:#include #define LOG_PATH "log.txt"HANDLE hFile;HHOOK hHook;LRESULT CALLBACK MessageProc(int nCode, WPARAM wParam, LPARAM lParam);INT WINAPI WinMain(HINSTANCE hInstance, HINSTANCE HHGG, LPSTR lpCmdLine, int...
20 Feb 2013 by Michael Haephrati
How can a parental control monitor both sides of chats? That should be done not by using keyboard hooks (which will monitor only one side of the conversation), but instead, by identifying the window and the control (listbox, editbox, etc.) used for communication, and capturing it textually. Is...
24 Oct 2012 by PJ Arends
I have set up a low level keyboard hook to filter out any unwanted keys that would allow a user (in this case my two year old daughter) from switching to another app or otherwise being able to leave the current app. The only problems so far are the sleep (VK_SLEEP) and Win + 'L' (Log Off) keys....
17 Nov 2012 by ohsorry
How can i capture the file selected message in Windows Explorer?on desktop or in windows explorer if a file or a folder's (or something else with a icon ) status is selected,then show a messagebox and print it's full name?if multiple selected print all of them?suppose I have the...
4 Nov 2012 by debdipta_ghosh
I want to log all keys pressed by user in all applications.... (Catch message WM_CHAR)....Is hooking WM_CHAR is that solution?? Any link of documentation???can any one help me?
13 Aug 2013 by Jean A Brandelero
Just searched a little and found this:A Flexible Plugin System[^]Edit:you can simple use this to get a value from the main exe:int x = (int)System.Reflection.Assembly.GetEntryAssembly().GetType("SharedVarsClass").GetField("SharedVar").GetValue(null);
6 Sep 2015 by dave_bulac
Hello guys.I am working in windows Form and need a code , which gives me on Form coordinates of Mouse Click. Click must be made outside of the Form , for example in Browser. To detect coordinates on Form is easily but I can't say the same when Click is made outside the Form. I have searched and...
21 May 2016 by Member 12537558
I've recently created a "hello world" c++ program:#include int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd){ MessageBoxA(NULL, "Hello World!", "", MB_OK); return 0;}What I need to do now is create a dll that...
15 Oct 2012 by Michael Haephrati
Skype for example encrypts it. Also, I am interested in discussing the question: is it possible to identify the UI element used by common chat application and capture the text inside it.
22 Aug 2014 by keyur chauhan
I want to prepare a keyboard hook just to know how hooking works , I am using visual studio 2012 for this purpose.so can anyone tell me what files I will need to create and link with ?Thanks in advance for your help , I appreciate it.
13 Aug 2013 by Sicppy
I am attempting to make a plugin API for my application, in order to do this, i need to be able to hook into the application itself and be able to grab, and maybe set information, what would be the best way to go about doing this, I would like, if possible, to be able to do this using only...
3 Aug 2013 by DragonetLi
I want to do this:set a window hook in an application such as cal.exe、IE,and if I press any key,my application can show me what key I pressed by message.show();Using C# please!I try to find the solution,but no one can help me ,please show me the code,thanks!My English maybe very bad,so don't care
9 Sep 2013 by zzeraciel
Well, i want to learn about hooking, but it seems that the tutorials found on the internet won't run.What i want to do is a jump hook, in C++.Here's the code :void DoHook(DWORD* Address, DWORD* Hook, DWORD pid){ HANDLE Server = OpenProcess(PROCESS_VM_OPERATION |...
27 Aug 2014 by keyur chauhan
someone please tell me the answer ?
7 Feb 2018 by Member 13536260
so I went here And downloaded the realeses from the github repo, But I don't understand something here, How do i use this, Do i only have to call the MinHook.h ? and use some functions from it? if yes then what is the purpose of precompiled dll in this link:...
24 Oct 2012 by Jochen Arndt
You may disable the Windows key (or use a keyboard without this key). This should prevent the excution of the logoff and other commands. See the KB article How to disable the keyboard Windows key[^]. Additional keys - like a sleep key on your keyboard - can be added to the registry value. The...
4 Nov 2012 by armagedescu
DWORD on x86 is a 32 bit unsigned integer. Is easy to find definition. Put cursor on DWORD in VisualStudio and press F12.