Cheat Engine

dnsi0 · Posted: Thu Aug 07, 2008 9:59 am Post subject: Dll Injection Question

When you inject a dll into say maplestory. Will the original apis called ex.kernel32, ntdll etc. By unhooked? Or do you still need a hook hop?

lurc · Posted: Thu Aug 07, 2008 10:52 am Post subject:

I'm pretty sure you can call them from MapleStory. MapleStory should be on the whitelist in GameGuard's hooks.

Zand · Posted: Thu Aug 07, 2008 10:56 am Post subject:

Do it in GameMon Very Happy

rapion124 · Posted: Thu Aug 07, 2008 12:28 pm Post subject:

dnsi0 · Posted: Thu Aug 07, 2008 1:00 pm Post subject:

Ok. so we still need hookhop for kernel32 right?

Zand · Posted: Fri Aug 08, 2008 2:46 am Post subject:

How do you hookhop kernel32????

Ksbunker · Posted: Fri Aug 08, 2008 9:32 pm Post subject: re:

Slugsnack · Posted: Sat Aug 09, 2008 3:52 am Post subject:

Yes with DLL injection, APIs are still hooked and not only those from kernel32.dll, other system libraries like gdi32.dll, etc. have functions in them hooked. And yes, you could still trampoline past.

I still don't know why people always seem to find the need to add the "mov edi, edi" when they're trampolining.. It's as useless as a NOP in the context you are using it in, may as well take it out.