DllMain is called, Kernel32.dll is guaranteed to be already loaded into the process address space. tasklist /m QuietHours.dll
csc), the the compiler option -target must be set to library. rundll32.exe can be used to call functions in a DLL if the function follows a specific syntax. AppInit_DLLs lists DLLs to be loaded (»injected«) into programs that are linked with User32.dll. .cpl files (Control Panel) are just DLLs with a special file name extension and the entry point CPlApplet.