Unlock instant, AI-driven research and patent intelligence for your innovation.

Dynamic link library injection method and apparatus

A technology of dynamic link library and injection device, which is applied in the direction of program control device, program loading/starting, program control design, etc., can solve the problems of easy detection of dynamic link library and difficulty of normal operation of games.

Active Publication Date: 2016-08-10
WUHAN DOUYU NETWORK TECH CO LTD
View PDF2 Cites 19 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The present invention mainly solves the technical problem that the dynamic link library existing in the prior art is easy to be detected, thereby making it difficult for the game to run normally, and provides a dynamic link library injection method and device

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Dynamic link library injection method and apparatus
  • Dynamic link library injection method and apparatus

Examples

Experimental program
Comparison scheme
Effect test

Embodiment

[0041] A dynamic link library injection method, including the following steps:

[0042] (1) Get the handle of the target process (need to be injected into the process game).

[0043] (2) Call the Windows function VirtualAlloc to allocate memory space in the target process, and the allocation size is the memory size of the dynamic link library that needs to be injected.

[0044] (3) Load the dynamic link library into the allocated space in a mapping manner. Because the alignment of the dynamic link library on the disk is inconsistent with the alignment in the memory, it is necessary to parse the various sections of the dynamic link library, according to each Each section is copied independently. And modify the memory attribute to the attribute of each corresponding section.

[0045] (4) Call the Windows function VirtualAlloc to allocate memory space in the target process. This memory space is a section of local function code, which is mainly used to initialize the dynamic link library...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a link library injection method and apparatus, in particular to a dynamic link library injection method and apparatus. According to the injection method and apparatus, a dynamic link library is loaded in a remote memory reading / writing mode without calling Windows and LoadLibrary functions, so that a trace of injection is not left, a module cannot be detected by a game, and anti-plug-in detection of the game is bypassed.

Description

Technical field [0001] The invention relates to a link library injection method and device, in particular to a dynamic link library injection method and device. Background technique [0002] At present, the live broadcast software obtains the display content of the graphics card through the Present function of d3d9.dll in the hook process, and then sends the displayed content to the server through the network to realize the live broadcast. The current hook technology is to insert stubs before the function to be hooked. Instrumentation is to modify the assembly code of the function header to be hooked into a jmp instruction to jump to its own function, and then restore the modified code after the function is called, and then jump to the original function to be hooked. The realization of this method needs to modify the code of d3d9.dll. [0003] However, many games, especially first-person shooting games (FPS) games, have "plug-ins", and the implementation of the "plug-in" function...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F9/445
CPCG06F9/44521
Inventor 周志刚
Owner WUHAN DOUYU NETWORK TECH CO LTD