A universal binary patching dll. Meant to be used with DLL Proxy Generator.
- Pick a suitable dll to proxy, like
version.dll
- Use
dll-proxy-generator.exe --import-dll "dll_universal_patcher.dll" --import "dummy" "C:\Windows\System32\version.dll"
to generate a suitable proxy dll. - Write up your patches into
patches.json
(more on this later) - Place the generated dll,
dll_universal_patcher.dll
, andpatches.json
in target directory to perform dll hijacking
Example:
[
{
"modules": [ "winver.exe", "{exe}" ],
"pattern": "01 02 03 04 05 ? 06 ?? 07",
"replacement": "90 90 90 90 C3",
"min_matches": 1,
"max_matches": 3,
"on_initialize": false,
"on_process_initialized": true,
"on_before_dllmain": false,
"is_code": true,
"allowed_to_fail": false,
"multishot": false
}
]
For more info, check out the schema