Boring

Results 66 comments of Boring

正常情况下32位程序不能加载64位dll。请尝试加载32位的a.dll。

感谢反馈。我在最近一次提交里已经添加了NTAPI。

Hi. MemoryModulePP supports building as a DLL. You only need to select the configuration ending with DLL for MemoryModule in the configuration manager. In addition, MemoryModulePP integrates [ReflectiveDllLoader](https://github.com/stephenfewer/ReflectiveDLLInjection), so it...

Since the DebugDll and ReleaseDll configurations are only the project configuration of MemoryModule and not the solution's configuration, you cannot build through the solution. Building directly from the project will...

You can use this class to call MemoryModulePP from the .NET platform: ``` c# public static class MemoryModulePP { [DllImport("kernel32.dll")] private static extern IntPtr VirtualAlloc( IntPtr lpAddress, UIntPtr dwSize, int...

Here is an example of calling the MemoryModulePP class, 0x1221 is the offset of ```MemoryModule.dll!ReflectiveLoader``` in the DLL file, which is constant for each MemoryModule.dll built. You can use [GetReflectiveLoaderOffset](https://github.com/stephenfewer/ReflectiveDLLInjection/blob/master/inject/src/LoadLibraryR.c)...

Yes, it does the same job as most loaders, just to do it without an external loader. If you don't want to use self-loading, you can use a third-party loader...

Hello, I added the configuration for the ARM platform to the solution and successfully ran the tests in a Windows 10 ARM64 simulation environment. I'm not very familiar with the...

Hi, thanks for your feedback. Since MMPP hooks ntdll!RtlUserThreadStart and ntdll!LdrShutdownThread, once the Initialize function is called, this module (that is, a.dll) cannot be released.

If b.dll does not use tls, you only need to comment the statement that initializes MmpTls (Initialize.cpp line 465). Otherwise, when a.dll is released, the program will inevitably crash.