Well it is injecting the dll. But its injecting it twice. Not sure its an mistake on my side with the pointers and i can't inject it twice in the same process (Creating the .net instance is not returning).
Code:
A6E3B6: thread has started (tid=35380)
14460000: thread has started (tid=31552)
14530000: loaded F:\HookLib.dll
15D10000: loaded C:\Windows\SysWOW64\msvcr110d.dll
5A680000: loaded C:\Windows\SysWOW64\mscoree.dll
5A600000: loaded C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
51130000: loaded C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
51050000: loaded C:\Windows\SysWOW64\msvcr120_clr0400.dll
750C0F22: 750C0F22: unknown exception code 4242420 (exc.code 4242420, tid 31552)
5124CF5C: thread has started (tid=34928)
512CA8C0: thread has started (tid=35140)
792D0000: loaded C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\d1265d6159ea876f9d63ea4c1361b587\mscorlib.ni.dll
16150000: loaded HookLib.dll
16210000: loaded HookLib.dll
Unloaded HookLib.dll
50620000: loaded C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
5D1C0000: loaded C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
50060000: loaded C:\Windows\SysWOW64\msvcr110_clr0400.dll
506B0000: loaded C:\Windows\assembly\NativeImages_v4.0.30319_32\System\487c38839683ae7c3d773386adc02b18\System.ni.dll
64680000: loaded C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\398e56685af78633b08f314531a56d65\System.Runtime.Remoting.ni.dll
5FD40000: loaded C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\4be244b3e99b278978c84a88c899e602\System.Configuration.ni.dll
620D0000: loaded C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\915f26510f92635eb9dbd939b3088bc6\System.Xml.ni.dll
511D24A2: thread has started (tid=31820)
512CA8C0: thread has started (tid=35828)
512CA8C0: thread has started (tid=34032)
Debugger: thread 31552 has exited (code 0)
This happens on the first Inject
Code:
30D0000: thread has started (tid=34568)
3610000: loaded F:\HookLib.dll
15D10000: loaded C:\Windows\SysWOW64\msvcr110d.dll
511A145D: The instruction at 0x511A145D referenced memory at 0x14534128. The memory could not be read -> 14534128 (exc.code c0000005, tid 34568)
this is the 2. inject and the pointers are from the second inject. The crash on the second happens while .net runtime is loading i guess. Do i Have to unload every DLL from .net after the first inject?
Dll Name Pointer :3090000
Channel Name Pointer :30A0000
StartUp Function Name Pointer :30B0000
ModuleName Pointer :30C0000
Code at: 0x30D0000
So My Pointer are complete out of range of this or am i missing something?
Idk why the dll is loaded twice tbh