View Single Post
  #1  
Old 08-17-2006, 21:01
Annibal
 
Posts: n/a
Some advices on dll memory patching please

Hello all,
i'm newbie, so don't be mad at me :P
My target exe load a dll (both exe and dll are maded with delphi and are not packed or protected).
I need to memory patch both. For the exe there are no problems, for the dll i'm confused. I use ollydbg, i load my target exe then i made a alt+E to view executable modules, then i double click on the target dll. Now the CPU main thread module window is opened. There i found the address i want to patch, for example 00911557. To create the loader i used, ABEL or Process Patcher by thewd. What puzzle me is that the patchers don't seems to patch the right place OR to find the address. For example, Process Patcher patch the exe correctly then remain stuck with a message saying "Waiting for a Module to be Initialised & Patched... Press CTRL+C to Quit". In the script i feed to it i have:
Filename=TEST.EXE
Filesize=4573024
Address=0x6D0254:0x55:0xC3

[Module]
Filename=test.dll
RetryCount=5
Address=00911557:0x0F:0x90

There is something i'm not taking in consideration? Since the dll is mapped into memory along with the exe that load it the address should not be correct?
Sorry i was a little long but some time problems are from little details :P

Thanks you
Reply With Quote