I am working on an x86 dll injector and i want to inject x86 code into a x64 process thread and execute it. First I was failing with calling CreateRemoteThread on x64 process which lead to error code 5. Then I've found <Removed> and I was able to create remote thread with it. But when I try to ResumeThread and execute that x86 code inside x64 process, whole process crash.
Injecting x86 to x86 works well, problem is only with x86 to x64.
So, my question is -- is it somehow possible to emulate and run x86 code copied inside x64 process? I know one way to do this would be to have two versions of the same code and choose one depending on the architecture of the remote process, but I don't find this as the best way to do this.
This post has been edited by macosxnerd101: 27 July 2012 - 12:12 PM
Reason for edit:: Removed link per site policies on malicious software