Difference between revisions of "Modunload"
(New page: {{AdvFileParam|modunload}} Tries to unload DLL through API from specified process. ==Usage== modunload=<filename(string)> ===Examples=== modunload=<$WINDIR>\notepad.exe Tries to unloa...) |
m (→Similar parameters: added similar addsafemode) |
||
(One intermediate revision by the same user not shown) | |||
Line 1: | Line 1: | ||
− | {{ | + | {{AdvParamInfo |
− | Tries to unload DLL through API from specified process. | + | |SYNTAX = modunload |
+ | |TITLESYNTAX = modunload | ||
+ | |PREVIOUS = | ||
+ | |VARIANTS = | ||
+ | |PEVERSION = ??? < 1.5.4.5 | ||
+ | |GROUP = Flow Control | ||
+ | }}Tries to unload DLL through API from specified process. | ||
==Usage== | ==Usage== | ||
Line 18: | Line 24: | ||
===Similar parameters=== | ===Similar parameters=== | ||
+ | * [[addsafemode]] | ||
* [[askregreboot]] | * [[askregreboot]] | ||
* [[build]] | * [[build]] |
Latest revision as of 09:46, 29 May 2008
modunload | |
Variants | modunload |
Previously | |
Group | Flow Control |
Version | advcheck.dll ??? < 1.5.4.5 |
Tries to unload DLL through API from specified process.
Contents
Usage
modunload=<filename(string)>
Examples
modunload=<$WINDIR>\notepad.exe
Tries to unload the current library from notepad.exe, which is a silly example.
Description
Injects code into processes created from the specified executable file to unload the currently tested library from it.
Important: this will probably leave the process in an unstable state, since it does not know the library was unloaded. While this might be useful to remove libraries that are otherwise in use, use with caution!