Quote:
Originally Posted by Isoline*
That's because the entry point address of the client is changing for each execution.
You will have to think out of the box a wee bit in order to inject it the right way.
|
finally it worked for a single dll
am now trying for multiply dlls
but it doesn't work
PHP Code:
PUSH 00D7FF14 //address of the first dll
PUSH 00D7F258 //address of the second one
CALL library
CALL 00B646C3
JMP 00B49972 //default entry point
then am point for the address of the first dll
////////////////////////
well figured it
PHP Code:
PUSH
CALL
PUSH
CALL