missed a thought
This commit is contained in:
1 parent
38b99a4ebb
commit
f86f7eaf1a
1 file changed
+1
@@ -14,6 +14,7 @@ else:
|
|||||||
# However the issue is that this sequence of original_bytes shows up many many times in the executable,
|
# However the issue is that this sequence of original_bytes shows up many many times in the executable,
|
||||||
# so we would end up patching many places that don't need to be patched,
|
# so we would end up patching many places that don't need to be patched,
|
||||||
# causing unintended functionality (likely) or else just causing the program to crash (extremely likely)
|
# causing unintended functionality (likely) or else just causing the program to crash (extremely likely)
|
||||||
|
# instead, we specify *just* enough bytes such that the sequence only occurs in one place:
|
||||||
original_bytes = b'\x48\x89\x54\x24\x10\x55\x56\x57\x48\x81\xEC\xF0\x00\x00\x00\x48\xC7\x44\x24\x78'
|
original_bytes = b'\x48\x89\x54\x24\x10\x55\x56\x57\x48\x81\xEC\xF0\x00\x00\x00\x48\xC7\x44\x24\x78'
|
||||||
# translated (from Ghidra (used to disassemble this program)): 15a0b00dc(*)
|
# translated (from Ghidra (used to disassemble this program)): 15a0b00dc(*)
|
||||||
# 14178b6c0 48 89 54 MOV qword ptr [RSP + 0x10],RDX
|
# 14178b6c0 48 89 54 MOV qword ptr [RSP + 0x10],RDX
|
||||||
|
|||||||
Reference in new issue
Block a user