PDA

View Full Version : Assembly dll editing memory editing


bepai
04-29-2009, 08:45 PM
Hello to all,

There's a section of memory which is being edited by one of two dll's when the relavent dll is loaded. I know what the code in the section of memory is and what the code gets changed to. What I dont know, and my question, is how to find the section of the dll which makes this edit. What do I look for? code in assembly.

Thanks

Spookster
04-30-2009, 12:30 AM
Use a debugger that allows you to put a watchpoint on that location in memory and see what code executes at the time the memory gets edited.

bepai
04-30-2009, 12:56 AM
I'm using ollydbg do you know if it has this feature? there is "watches" but this is for expressions?