I replaced ntsuspend function with ntresume, the dll not running after injection even tough local process not suspended. İt worked after ı erased the unhooking function (RefreshAllDlls) from actualmain function. What might be the problem ? if everything right in RefreshAllDlls function in which injection scenarios it should work ? Thank you.
vigil0x68
commented
6 months ago
I replaced ntsuspend function with ntresume, the dll not running after injection even tough local process not suspended. İt worked after ı erased the unhooking function (RefreshAllDlls) from actualmain function. What might be the problem ? if everything right in RefreshAllDlls function in which injection scenarios it should work ? Thank you.