scp-internal-il2cpp icon indicating copy to clipboard operation
scp-internal-il2cpp copied to clipboard

Injector?

Open totorowldox opened this issue 5 years ago • 5 comments

Long time no see. I'm back to play SCPSL now.

But when I updated the offsets and tried to inject the dll. I find that the LoadLibrary is no longer work. I also tried SetThreadContext but failed with WinError 87. So how can I inject it now? Do ya have any solutions?

totorowldox avatar Jan 29 '21 14:01 totorowldox

The public injectors will be banned, and I have no idea how to make an injector.

totorowldox avatar Jan 29 '21 14:01 totorowldox

The public injectors will be banned, and I have no idea how to make an injector.

Hi. I released AC bypass on UC.

So how can I inject it now? Do ya have any solutions?

Manual map would still work fine, but you have to rewrite import section mapping to use anything else than using hooked LoadLibrary. You could remove hook from injector to bypass limits.

CreateThread, GetModuleHandle and some other functions are also hooked by AC.

t1f7 avatar Feb 05 '21 10:02 t1f7

maybe thats a bit overkill but i use modmapper loaded with kdmapper

fzp0 avatar Jul 19 '21 17:07 fzp0

maybe thats a bit overkill but i use modmapper loaded with kdmapper

This base is detected as is, I'm not sure kernel injector would make it UD. Currently the best way (in my opinion) would be to keep external (as they have literally nothing against them)

t1f7 avatar Jul 23 '21 08:07 t1f7

actually there's an easy way to inject. the two moments you're getting detected are:

  1. Thread creation (even RemoteThread), it is handled with TLS callbacks. Suspend the game before injection and resume after. TLS callback won't trigger while suspended.

  2. LoadLibrary is hooked and would trigger on injection, because injector has to solve imports of your DLL. You could remove hook from LoadLibrary while game is suspended to complete an UD injection.

have fun.

t1f7 avatar Nov 22 '21 09:11 t1f7