Cheat Engine

[661089799107]

I would like to create a user thread in a target user process from a kernel driver.

The reason for this is I am mapping a DLL module to the process, and I need to execute the DllMain.

I have searched around, and was unable to find a kernel function to do this.

[Dark Byte]

Do a code injection at an often called routine (e.g syscall) and from there call createThread
Or try an apc which points to a function that does createThread

[661089799107]

With the APC method doesn't the process have to have an alertable thread? So that may not work for every process?

I think i'll use the first method you mentioned.

Thanks