Member Avatar for triumphost
triumphost 120 Posting Whiz

I have a modified a DLL called UserEnv and I decided to check out reverse engineering and assembly.. When my DLL Loads, it writes and displays a messagebox saying it's loaded.. Sorta like injection into notepad which I learned from: How To Inject Into Notepad

The DLL Now looks like:
[IMG]http://i.imgur.com/JMwj7.png[/IMG]

But I cannot figure out how to remove the msgbox.. I tried NOPing all four Pushes and I tried JMP right over it.. Not sure if I'm doing the right lines or addresses..

Help me please?

I posted here because I thought it was written in C++ so it'd be fine? Or should I just get the thread moved to the assembly section?

  • 1 Contributor
  • 0 Replies
  • 93 Views
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.