
Originally Posted by
radnomguywfq3
Right now, it just loads the library in to the local process. Making it do otherwise, is a simple manner of replacing memcpy with writeprocessmemory, virtualalloc with VirtualAllocEx, and the call with CreateRemoteThread, etc...
First, I did like to thank you, I'm really thankful you are helping me.
From my point it isn't simple as you say, although I'm too nooby to say that.
The things I understand now are:
1. With your code I don't need to write the file to the hard disk, that's because I can take the resource and write it to the current process memory, from that point PE Loader will do his work.
I do that with these functions: FindResource, LoadResource, CreateFile, CreateFileMapping, MapViewOfFile. With these to just close: UnmapViewOfFile, CloseHandle.
2. I need to change things in your code to make it write to a remote process cause now it just load the dll to the current process.
------------
I think I got it wrong in 1. Which functions do I actually need to use?