Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Can't find my DLL in loaded modules, DLL injection fails

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
Paprikaskrumpli
Cheater
Reputation: 0

Joined: 19 Dec 2020
Posts: 29

PostPosted: Sun Jan 10, 2021 3:59 am    Post subject: Can't find my DLL in loaded modules, DLL injection fails Reply with quote

I'm trying to load my DLL into QtWebEngineProcess.exe.
There are 4 processes with this name. I can inject and find my DLL in 3 of them.
The one I can't inject into is the one that I actually really need to. (This is where the game data located, etc...).

I wrote two test apps, one 64 and the other 32 bit. I can inject the DLL into both of them. (64 bit DLL - 64 bit process, 32 - 32 of course.)

I can inject my DLL into most apps. Like "The Forest" or "Heroes of the storm".
The case with Spotify is the same with QT. 4 processes, same name, one doesn't work.

What I know and tried:
-Qt's process is 64 bit and my injector is 64 bit (wrote a simple one in c++)
-Tried loading 32/64 bit DLLs into Qt with 32/64 injector, every possible combination, no results
-My DLL is 64 bit (or 32, if process is 32, just like the injector)
-There is nothing in my DLL aside from dll main.
-WriteProcessMemory and LoadLibraryA seems to work, the remote thread
gets initialized.
-I'm running as administrator
-I checked what DLLs Qt uses, and what DLLs my test programs uses. All DLLs loaded in my test program are also loaded in QT, so if I understand things right, it shouldn't be a dependency issue.

My injector also contains a lil function to check is the dll is loaded. It says no when I'm trying to inject into Qt, and so do cheat engine too.

I tried CE's dll injector, to no avail, it fails. Guided Hacking's dll injector also fails. They fail on the exact same cases when my program fails. (They can't inject the dll into the mentioned problematical processes)

Here is the DLL:



64bitError.PNG
 Description:
64 Bit DLL error message
 Filesize:  16.22 KB
 Viewed:  6724 Time(s)

64bitError.PNG



32BitError.PNG
 Description:
32 Bit DLL error message
 Filesize:  13.34 KB
 Viewed:  6724 Time(s)

32BitError.PNG



dll.PNG
 Description:
 Filesize:  10.88 KB
 Viewed:  6726 Time(s)

dll.PNG


Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 470

Joined: 09 May 2003
Posts: 25811
Location: The netherlands

PostPosted: Sun Jan 10, 2021 7:09 am    Post subject: Reply with quote

try compiling your dll with static runtime only
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Paprikaskrumpli
Cheater
Reputation: 0

Joined: 19 Dec 2020
Posts: 29

PostPosted: Mon Jan 11, 2021 1:03 pm    Post subject: Reply with quote

Dark Byte wrote:
try compiling your dll with static runtime only


Thank you, that worked!
What DLL injecting method does CE use? Manual mapping?

I enumerated the process modules of the game with a program that I wrote but It couldn't find the DLL, although when I enumerated the DLLs with CE it showed up.

Is that because CE uses cloaking methods?
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 470

Joined: 09 May 2003
Posts: 25811
Location: The netherlands

PostPosted: Mon Jan 11, 2021 1:09 pm    Post subject: Reply with quote

CE uses manual mapping. It shows up because it's the one that mapped it so registered the exports while mapping it. If you where to open another CE and check that process, it wouldn't see it
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Paprikaskrumpli
Cheater
Reputation: 0

Joined: 19 Dec 2020
Posts: 29

PostPosted: Tue Jan 12, 2021 5:31 am    Post subject: Reply with quote

Dark Byte wrote:
CE uses manual mapping. It shows up because it's the one that mapped it so registered the exports while mapping it. If you where to open another CE and check that process, it wouldn't see it


Makes sence, thank you!
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites