Registered: Dec 2002
Location:
Posts: 26

When a dll is loaded into a program force or normal it has an area that is always called no matter what.

between
dllEntry PROC
dllEntry endp

it is always called

so if you want to find the curent process that calls that dll all you have to do is.

code:
.586
.MODEL          FLAT,STDCALL

INCLUDE         \masm32\include\Windows.inc
INCLUDE         \masm32\include\Kernel32.inc
INCLUDE         \masm32\include\User32.inc
INCLUDELIB    \masm32\lib\Kernel32.lib
INCLUDELIB    \masm32\lib\User32.lib

.DATA
WindowName db "The Names of the window",0

.DATA?
Finished dword ?
BLANK2 dword ?
FoundIT dword ?

.CODE
dllEntry        PROC
    cmp Finished,01h
    je YepFinished
    invoke FindWindowA,NULL,offset WindowName
    cmp eax,00h
    je YepFinished
    mov Finished,01
    invoke GetWindowThreadProcessId,eax,offset BLANK2
    invoke OpenProcess,PROCESS_VM_READ or PROCESS_VM_WRITE or PROCESS_VM_OPERATION,0,BLANK2
    mov FoundIT,eax
    YepFinished:
    ret
dllEntry        endp
END             dllEntry

Last edited by bitRAKE on January 2nd, 2003 at 01:35 PM

Report this post to a moderator | IP: Logged

Registered: Oct 2001
Location:
Posts: 50

Uhmm ...... Not to bother you, but ....

quote:

---

so if you want to find the curent process that calls that dll all you have to do is.

---

__________________
There is no tomorrow, just another yesterday ...

Report this post to a moderator | IP: Logged

Registered: Dec 2002
Location:
Posts: 26

well true. but is does do what i said also just a diff way of doing it. im sure if you dont know the name of the window you will need to try a diff approch.

Report this post to a moderator | IP: Logged

Registered: Oct 2002
Location:
Posts: 23

Hi,

Since your DLL is run as the process that calls it, all you need to do is:

code:

invoke GetCurrentProcessId
invoke OpenProcess,PROCESS_ALL_ACCESS,FALSE,eax

Report this post to a moderator | IP: Logged

Registered: Dec 2002
Location:
Posts: 26

Well i found a new way to get the process info that is faster and you dont need the windows name.

this will get the id of the current process that your dll is in.

code:
dllEntry        PROC    hInstance,fdwReason,lpvReserved

        .IF fdwReason==DLL_PROCESS_ATTACH
        call addon_02
        invoke GetCurrentProcessId,NULL
        invoke OpenProcess,PROCESS_VM_READ or PROCESS_VM_WRITE or PROCESS_VM_OPERATION,0,eax
        mov ReturnValue,eax
        .ELSEIF fdwReason==DLL_PROCESS_DETACH
        .ENDIF
    mov eax,1
    ret
dllEntry        ENDP

Last edited by bitRAKE on January 2nd, 2003 at 01:37 PM

Report this post to a moderator | IP: Logged