| View previous topic :: View next topic |
| Author |
Message |
Dark_Walk
Master Cheater
 Reputation: 0
Joined: 26 Sep 2006
Posts: 315
Location: Canada
|
 Posted: Fri Feb 15, 2008 4:48 am Post subject: LOADBINARY replace |
 |
|
| Code: | | LOADBINARY(DUMP,Arc34.CEM) |
I am looking for a asm function that can replace that one. I don't care if the files information is hard coded in.
_________________
Hai |
|
| Back to top |
|
 |
DoomsDay
Grandmaster Cheater
 Reputation: 0
Joined: 06 Jan 2007
Posts: 768
Location: %HomePath%
|
| Posted: Fri Feb 15, 2008 6:17 am Post subject: |
|
|
CreateFile(...) > GetFileSize(...) > VirtualAlloc(...) > ReadFile(...) > CloseHandle(...)
Last edited by DoomsDay on Sat Feb 16, 2008 2:32 am; edited 2 times in total |
|
| Back to top |
|
|
FerrisBuellerYourMyHero
Master Cheater
 Reputation: 0
Joined: 14 Feb 2007
Posts: 401
Location: Inside your <kernel>
|
| Posted: Fri Feb 15, 2008 4:07 pm Post subject: |
|
|
why load a saved dump?? then you have to make one every patch...
make the copy of memory on the fly
VirtualAlloc->
then copy to the address
| Code: |
pushad
mov ecx, 00380000h
mov esi, 00400000h // or wherever you want to start the copy
mov edi, addr VirtualAllocatedAddress
rep movsb
popad
|
_________________
You know, life moves pretty fast. If you don't stop and look around once in a while, You could miss it!
 |
|
| Back to top |
|
|
Dark_Walk
Master Cheater
Reputation: 0
Joined: 26 Sep 2006
Posts: 315
Location: Canada
|
| Posted: Fri Feb 15, 2008 8:16 pm Post subject: |
|
|
I don't fully understand what to do yet. I am trying, but I am very new to ASM. I am using a program other than CE and it does not understand what LOADBINARY is, so I am trying to find another way around it. I tried a huge DB command but well that failed due to some limitations. As you can imagine injecting a huge hex file would. All I am trying to do is make a copy of the memory from 00400000 to 00500000. I'm sorry if I seem so retarded, I'm new and I would really like to know how to do this in auto-assembler.
_________________
Hai |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
