search

Dewera / Lunar

A lightweight native DLL mapping library that supports mapping directly from memory
MIT License
584 stars 102 forks source link

Failed to call the entry point of the DLL with ProcessAttach #27

Closed RivaTesu closed 3 years ago

RivaTesu commented 3 years ago

Do u guys know how to fix the shellcode for 20H2?

Argentoz commented 3 years ago

i have same error

RivaTesu commented 3 years ago

i have same error

Its a shellcode issue, but I have no idea how to manipulate/update it..

Argentoz commented 3 years ago

Lunar 1.1.0 from NuGet works fine

RivaTesu commented 3 years ago

Lunar 1.1.0 from NuGet works fine

I will test, thanks for share with me.

Dewera commented 3 years ago

Hi all, apologies for delays I've been busy with work and some other projects. As I've had quite a few people report this I'll take a look into when I get the time.

Its a shellcode issue, but I have no idea how to manipulate/update it..

Definitely isn't an issue with the shellcode as the library makes many calls using the same shellcode before it even gets to calling DLL main. If I had to guess right now, it's probably an issue with the locking mechanism on the PEB or something to do with the exception handling internals.

Dewera commented 3 years ago

@RivaTesu can you please test the new 1.5 release and see if this fixes your issue?

RivaTesu commented 3 years ago

@RivaTesu can you please test the new 1.5 release and see if this fixes your issue?

Yeah, it's working! Do you have plans to load Win32/64 dependencies without "LoadLibrary" in a future update?

Dewera commented 3 years ago

It's on the todo list. I have a working version somewhere that I wrote a while ago but it has performance issues and some other problems that are stopping me from putting it into this library. When I figure that out (and get the time) I'll add it in.