Jump to content
Tuts 4 You

NOP a process's functions in VB .net?


PiZZAMiN

Recommended Posts

[PR ID] Program.exe!Program.exe+0x3E300 || [0x0043E300] || Custom Patch [6 Bytes] || mov edx , dword ptr [esp+04h] || nop
[PR ID] Program.exe!Program.exe+0x3E360 || [0x0043E360] || Custom Patch [7 Bytes] || push esi || nop
[PR ID] Program.exe!Program.exe+0x3E940 || [0x0043E940] || Custom Patch [6 Bytes] || push ebx || nop
[PR ID] Program.exe!Program.exe+0x75BD0 || [0x00475BD0] || Custom Patch [8 Bytes] || sub esp , 40h || nop

How can I inject this into the process? It needs to be loaded when the user wants, and the patchmydata won't load if these patches are in the exe eg. i open it and in olly do save to exe with patches then load it crashes. There is no other solution except to do it at a random time. I also want to make sure to have it as a separate exe, as thats what I need to pm them. SO... can anyone make an example? Or is this impossible? Thanks in advance and thanks for reading!

Link to comment

Import WriteProcessMemory and write the array to the target process:
/>http://www.pinvoke.net/default.aspx/kernel32.writeprocessmemory

You can get a valid handle to use from the Process namespace rather then bothering with OpenProcess:
/>http://msdn.microsoft.com/en-us/library/system.diagnostics.process.aspx

Link to comment

Import WriteProcessMemory and write the array to the target process:
/>http://www.pinvoke.net/default.aspx/kernel32.writeprocessmemory

You can get a valid handle to use from the Process namespace rather then bothering with OpenProcess:
/>http://msdn.microsoft.com/en-us/library/system.diagnostics.process.aspx

So how would I for example change the function at 0045B87 to NOP?

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...