| View previous topic :: View next topic |
| Author |
Message |
Paprikaskrumpli Cheater
Reputation: 0
Joined: 19 Dec 2020 Posts: 29
|
Posted: Sun Jan 10, 2021 3:59 am Post subject: Can't find my DLL in loaded modules, DLL injection fails |
|
|
I'm trying to load my DLL into QtWebEngineProcess.exe.
There are 4 processes with this name. I can inject and find my DLL in 3 of them.
The one I can't inject into is the one that I actually really need to. (This is where the game data located, etc...).
I wrote two test apps, one 64 and the other 32 bit. I can inject the DLL into both of them. (64 bit DLL - 64 bit process, 32 - 32 of course.)
I can inject my DLL into most apps. Like "The Forest" or "Heroes of the storm".
The case with Spotify is the same with QT. 4 processes, same name, one doesn't work.
What I know and tried:
-Qt's process is 64 bit and my injector is 64 bit (wrote a simple one in c++)
-Tried loading 32/64 bit DLLs into Qt with 32/64 injector, every possible combination, no results
-My DLL is 64 bit (or 32, if process is 32, just like the injector)
-There is nothing in my DLL aside from dll main.
-WriteProcessMemory and LoadLibraryA seems to work, the remote thread
gets initialized.
-I'm running as administrator
-I checked what DLLs Qt uses, and what DLLs my test programs uses. All DLLs loaded in my test program are also loaded in QT, so if I understand things right, it shouldn't be a dependency issue.
My injector also contains a lil function to check is the dll is loaded. It says no when I'm trying to inject into Qt, and so do cheat engine too.
I tried CE's dll injector, to no avail, it fails. Guided Hacking's dll injector also fails. They fail on the exact same cases when my program fails. (They can't inject the dll into the mentioned problematical processes)
Here is the DLL:
| Description: |
|
| Filesize: |
16.22 KB |
| Viewed: |
6724 Time(s) |

|
| Description: |
|
| Filesize: |
13.34 KB |
| Viewed: |
6724 Time(s) |

|
| Description: |
|
| Filesize: |
10.88 KB |
| Viewed: |
6726 Time(s) |

|
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25811 Location: The netherlands
|
Posted: Sun Jan 10, 2021 7:09 am Post subject: |
|
|
try compiling your dll with static runtime only
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
Paprikaskrumpli Cheater
Reputation: 0
Joined: 19 Dec 2020 Posts: 29
|
Posted: Mon Jan 11, 2021 1:03 pm Post subject: |
|
|
| Dark Byte wrote: | | try compiling your dll with static runtime only |
Thank you, that worked!
What DLL injecting method does CE use? Manual mapping?
I enumerated the process modules of the game with a program that I wrote but It couldn't find the DLL, although when I enumerated the DLLs with CE it showed up.
Is that because CE uses cloaking methods?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25811 Location: The netherlands
|
Posted: Mon Jan 11, 2021 1:09 pm Post subject: |
|
|
CE uses manual mapping. It shows up because it's the one that mapped it so registered the exports while mapping it. If you where to open another CE and check that process, it wouldn't see it
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
Paprikaskrumpli Cheater
Reputation: 0
Joined: 19 Dec 2020 Posts: 29
|
Posted: Tue Jan 12, 2021 5:31 am Post subject: |
|
|
| Dark Byte wrote: | | CE uses manual mapping. It shows up because it's the one that mapped it so registered the exports while mapping it. If you where to open another CE and check that process, it wouldn't see it |
Makes sence, thank you!
|
|
| Back to top |
|
 |
|