how to intercept that the update of window to the windows driver level?
—windows update
|
–user32.dll
|
—ntdll.dll
—————————— (intercept point).
|
—-kernel(win32.sys, etc…)
i want to intercept all the update of windows (gdi and ddraw update), then how to implement it?
i have one suggestion is that i hook gdi update api and ddraw update api separately. but i dot hook gdi update api, i have hook BitBlt, BeginPaint and GetDC, but i can’t protect the windows updating.
how to solve the problem?
This question shows a fundamental misunderstanding about how updating windows and DWM work. What are you trying to accomplish at a high level? What user feature would you need to do this?