Skip to main content
Reverse Engineering

Return to Question

added 99 characters in body
Source Link
FreeMind
FreeMind
  • 639
  • 3
  • 9
  • 17

How to access and modify data segment when doing hardware breakpoint crashes the application?

I want to modify the data segment in the x64_DBG, however, I don't know how to access it. 

lea r8,qword ptr ds:[7FEF0CA6AD8]

In the above code, the address 7FEF0CA6AD8 is loaded in r8 register. I want to access the content of 7FEF0CA6AD8 memory address and modify it. The problem is each time I modify the address and test in the program something writes to 7FEF0CA6AD8 memory address. How can make it read only or find a the thing which writes to this address and try to modify that in the same way? My purpose is changing the value of this data segment register or find the logic behind the method which writes to it.
Hardware breakpoint might be a solution but when I do so the program crashes immediately

How to access and modify data segment?

I want to modify the data segment in the x64_DBG, however, I don't know how to access it. 

lea r8,qword ptr ds:[7FEF0CA6AD8]

In the above code, the address 7FEF0CA6AD8 is loaded in r8 register. I want to access the content of 7FEF0CA6AD8 memory address and modify it. The problem is each time I modify the address and test in the program something writes to 7FEF0CA6AD8 memory address. How can make it read only or find a the thing which writes to this address and try to modify that in the same way? My purpose is changing the value of this data segment register or find the logic behind the method which writes to it.

How to access and modify data segment when doing hardware breakpoint crashes the application?

I want to modify the data segment in the x64_DBG, however, I don't know how to access it. 

lea r8,qword ptr ds:[7FEF0CA6AD8]

In the above code, the address 7FEF0CA6AD8 is loaded in r8 register. I want to access the content of 7FEF0CA6AD8 memory address and modify it. The problem is each time I modify the address and test in the program something writes to 7FEF0CA6AD8 memory address. How can make it read only or find a the thing which writes to this address and try to modify that in the same way? My purpose is changing the value of this data segment register or find the logic behind the method which writes to it.
Hardware breakpoint might be a solution but when I do so the program crashes immediately

Source Link
FreeMind
FreeMind
  • 639
  • 3
  • 9
  • 17

How to access and modify data segment?

I want to modify the data segment in the x64_DBG, however, I don't know how to access it. 

lea r8,qword ptr ds:[7FEF0CA6AD8]

In the above code, the address 7FEF0CA6AD8 is loaded in r8 register. I want to access the content of 7FEF0CA6AD8 memory address and modify it. The problem is each time I modify the address and test in the program something writes to 7FEF0CA6AD8 memory address. How can make it read only or find a the thing which writes to this address and try to modify that in the same way? My purpose is changing the value of this data segment register or find the logic behind the method which writes to it.