Cheat Engine

[ErrorMaker]

[ErrorMaker]

Ok my DLL can successfully inject a DLL into any process and hook those functions:

connect
wsaconnect
recv
wsarecv
send
wsasend

Now what I wanna do is getting the html source of the current page of a browserprocess using the recv and wsarecv functions. But I get data like this from the recv & wsarecv function:

[atom0s]

You get crap data more then likely due to encryption. You will need to find out whether or not the game does encrypt the data or if you are just incorrectly reading it from the buffer. (Wrong character set maybe?)

When you inject your DLL into another process you have direct access to the process and its memory. You don't, by default, have a hWnd as the DLL is not passed that information. You can use things like:
- GetCurrentThread()
- GetCurrentProcess()
- GetCurrentProcessId()

Which can be used to find additional information if need be.

Unejecting your DLL can be done one of a few ways and no it does not require you to call DLL_PROCESS_DETACH. The system will automatically call your DLL entry point and push that when the DLL is unloaded.

One method is to use FreeLibrary the same way you used LoadLibrary to inject. Instead of the DLL path though, you need to obtain the already loaded modules handle. Which you can do with CreateToolhelp32Snapshot / Module32First + Module32Next or with the PSAPI equivalents.

Another method would be to inject your own code stub to call the same thing or to use LdrUnloadDll.

Another method would be to call an exported function inside your module that has the ability to clean itself up and unload itself internally.

Up to you which you want to do.

[Slugsnack]

Something to watch out for in DLL ejection is that you must make sure you kill all threads running in the DLL before you eject it or else the memory will be freed and a thread will try to run on the freed memory and crash.

[atom0s]

[ErrorMaker]

Thanks again for the help

At the moment I'm not looking for logging packets of game. I want to get the html source of the page which my browser process is currently at.

I try now to communicate from my VB6 application to the (injected into a browser process) DLL.

I found this guide: http://www.digitalise.net/2009/01/02/calling-an-exported-function-in-an-injected-dll-library/

[justa_dude]

If you're using IE, it's trivial to get the document source via automation/COM - like six or seven lines of vbscript.

[ErrorMaker]

Thanks for you answer But the problem is, that i dont want to get the html source of just an IE page. I can simply get it with IE when loading a page with the IE componente of VB6, but I wanna get the current html source of the page of the process my DLL is injected to :/

[justa_dude]

BHO?

[atom0s]