Registriert seit: 30. Jan 2004
823 Beiträge
|
Re: DLL Injection Code Port Question
23. Jul 2008, 08:51
The old code was working for me with my changes i posted above.
Do an int3 at the beginning of the injected code and debug with a just in time debugger (ex. ollydbg).
Be sure you dont inject to fast afher target process start. Dllmain must be executed (if you create the process yourself with CREATE_SUSPENDED, its pauses at system breakpoint not dllmain).
Be Sure the Thread is stopped. Suspend Thread suspends the Thread only if the Result value is -1 or 0. Its like a counter. If someone calls Resumethread mroe times on the threadid it is increased. You have to call SuspendThread until its really suspended!
There are also some more bugs with this method
|