kcynice
04-15-2008, 10:33 AM
I unpacked a dll file, but i found it could not be loaded by loadlibrary function. So, i traced it. I found the stack: [esp+8]=0,[esp+0c]=1 when it entered DllMain. But i traced a nother normal dll file, found the stack is so different: [esp+8]=1,[esp+0c]=0. And MSDN says the third param is unused, so [esp+0c]=0 should be correct. I think that's might be the problem.
I will be very appreciated if anybody would like to tell me why?
Regards,
I will be very appreciated if anybody would like to tell me why?
Regards,