Why LoadLibrary loads unrelated DLLs -
this dll injection.
let's p.exe depends on a.dll, b.dll , c.dll (implicit linking), they're private modules of p.exe.
now use createprocess create_suspended flag launch p.exe, after use createremotethread call loadlibrary in target process load inject.dll, , in same way call initialize function of inject.dll real work (things can't in dllmain).
it works. found calling loadlibrary makes a.dll, b.dll , c.dll load - not inject.dll. output of visual studio, load before inject.dll, not want. know, inject.dll not depend on third-party dlls, in fact depends on kernel32.dll , user32.dll.
in case, how load inject.dll ?
Comments
Post a Comment