Results 1 to 3 of 3

Thread: Process Patching

  1. #1

    Process Patching

    For the past week or so i've been focussing on cracking a particular software application, and the method that is least intrusive to the application is to edit the third party dll's it uses to verify registration.

    I've created a chunk of assembly code and *can* patch the process directly on the disk, but this raises a problem that i can't seem to overcome. If you edit the dll, when you try to perform a certain action it brings up the 'unable to verify software version' message (it connects to a server, its a server-based application). I know that its only because ive patched it on disk that is causing the problem, as if i don't connect to the server the patch runs fine in local mode. It sends a CRC and i don't particularly want to edit more than i have to, and optimally i want to be able to patch and revert on-the-fly.

    Basically, i need to be able to patch the process after its already started running. I've searched the forum and google/yahoo, and come up with nothing. In particular i was looking for an application similar to the generic patchers, only it patched an already running process.

    ie. You compare original and modified files to create a patch, then the patch can be executed and not affect the hard-copy of the file at all.

    I saw something on a forum a while back, but im not sure if it went as far as to discuss how it would work to patch dll files in memory, which is my main goal (connect to the server, then patch, i know for certain the check is only on login).

    Does anybody know of a tool that can do this, or a tutorial/sample source code for a patcher or for just plain patching of this type?

    Thanks in advance.

  2. #2
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Ring -1
    Blog Entries
    Check out the Win32API commands CreateProcess/OpenProcess and WriteProcessMemory (and possibly also SuspendThread/ResumeThread if you want to be really fancy ), that should be enough to get you started.

  3. #3
    Use the DzA Patcher:
    LibX // RETeam

Similar Threads

  1. Patching symbian exe
    By treby in forum The Newbie Forum
    Replies: 28
    Last Post: February 1st, 2008, 14:30
  2. Patching with IDA Pro
    By Palish in forum Tools of Our Trade (TOT) Messageboard
    Replies: 8
    Last Post: April 19th, 2006, 15:04
  3. .Net Patching
    By peterg70 in forum The Newbie Forum
    Replies: 7
    Last Post: August 30th, 2005, 08:59
  4. Patching dll at runtime
    By SaNGa in forum Advanced Reversing and Programming
    Replies: 3
    Last Post: April 7th, 2002, 01:09
  5. Patching APDFPR Pro 1.61 ?
    By foxthree in forum Malware Analysis and Unpacking Forum
    Replies: 5
    Last Post: March 4th, 2002, 07:42


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts