Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #5  
Old 01-10-2024, 23:55
th3tuga th3tuga is offline
Friend
 
Join Date: Oct 2023
Posts: 31
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 16 Times in 10 Posts
th3tuga Reputation: 0
Quote:
Originally Posted by cracki View Post
Thank you for your response and the guidance you provided!


If I save a version of the DLL that has been extracted from the embedded state alongside the program and somehow (as per the techniques mentioned in the tutorial you provided) remove the "module initializer" so that "the embedded references will be ignored when running the binary" will the program then use the file I saved and patched?
Yes it will work.
As long as the executable has import references to functions in the patched DLL. You should save it in the same folder the calling executable is in.
This is same principle why proxy dll or DLL hijacking works.
Reply With Quote
The Following User Says Thank You to th3tuga For This Useful Post:
cracki (01-13-2024)
 

Tags
.net, assembly, dnspy, dotnet


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Olly Crash when this simple app loaded... kunam General Discussion 6 10-10-2023 21:00
Question on IDA's Edit|Patch program? boya General Discussion 2 10-23-2004 01:36
IDA Pro (what happened to edit->patch) ReDucTor General Discussion 3 08-31-2004 21:02
Modules loaded by a exe loman General Discussion 15 05-18-2004 22:37


All times are GMT +8. The time now is 18:42.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )