help with register

[Hatish]

Hi how can i change register in specific addres?
for example i have this addres 0034534 and i want to change the register of eax
how can i do?

[lolkop]

that easily done via inline asm.

step 1: allocate some memory
step 2: write your asm logic into the allocation (mov eax, <value>; push <nextAdress>; retn)
step 3: place a jmp at your adress (0x0034534) pointing to your allocation

[Hatish]

Originally Posted by lolkop

that easily done via inline asm.

step 1: allocate some memory
step 2: write your asm logic into the allocation (mov eax, <value>; push <nextAdress>; retn)
step 3: place a jmp at your adress (0x0034534) pointing to your allocation

you can do a simple example of script?

[Hatish]

push

[Shadow992]

Originally Posted by Hatish

you can do a simple example of script?

Use my UDF and just Inject some ASM-Code which modifies your register:

[Hatish]

I read your udf but i need an example of script if possible

[Shadow992]

Originally Posted by Hatish

I read your udf but i need an example of script if possible

Where is the problem?

PHP Code:

$size=5 ; Size of Opcodes overwritten, will be different from 5 for sure
$open=_MemoryManipulationOpen($process)
_InjectASMAtAddress($open, 0x0034534, $size, "MOV eax, 1000") 


[Hatish]

$size need or i can jump it? PS: i trie to do a script but dont add eax at addres

[Shadow992]

Originally Posted by Hatish

$size need or i can jump it? PS: i trie to do a script but dont add eax at addres

$size is the size of opcode you are overwriting at the specific address, min. is 5 and you will need for sure not exactly 5 but 6 or more.