Hot Patching

» Hot Patching

» Hot Patching — Thu, 14 Jun 2007 14:02:34 GMT

Pingback from » Hot Patching

» Hot Patching

» Hot Patching — Thu, 14 Jun 2007 14:02:33 GMT

Pingback from » Hot Patching

Kernel Mustard » Blog Archive » Whence came function hooking?

Kernel Mustard » Blog Archive » Whence came function hooking? — Thu, 14 Jun 2007 05:46:55 GMT

Pingback from Kernel Mustard » Blog Archive » Whence came function hooking?

反馈收集和回复

Usermode Troubleshooooo..ting paper — Thu, 03 Aug 2006 14:55:03 GMT

反馈收集和回复===请您在这里通过添加评论留下您对这篇文章的反馈信息，我会及时整理并且回复。如果您的反馈不想让别人看到，可以点击右边的Email链接给我发邮件：
http://blogs.msdn.com/lixiong/contact.aspx...

Hot Patching

Khurram Aziz — Mon, 20 Feb 2006 04:31:12 GMT

Over the last few years; rebooting Windows frequency is decreased. People have started making good installers....

re: Hot Patching

Steve Dispensa — Thu, 12 May 2005 11:53:00 GMT

>>The reason is easy - the MOV is called every time the
>>function is called, whether it is hooked or not (or,
>>more precisely, when it its not hooked).

Actually it's about applying patches safely - if there were two NOPs the EIP in some thread at the moment when patch is being applied could point to second NOP which would result in execution of second byte of jmps as an instruction. But when there's a 2-byte instruction, you can always replace it with another 2-byte instruction, cause EIP points either at it or at next instruction (it's also SMP-safe, cause CPU will re-read instruction when it detects a write to any of the instruction bytes while)

re: Hot Patching

Steve Dispensa — Wed, 27 Apr 2005 12:29:00 GMT

To try out this functionality yourself, simply call NtSetSystemInformation with the Information Class 69 (SystemApplyHotPatch).
You'll need a large undocumented structure, and a handle to a file contaninga a special hot patch PE section with special hot patch data. Once you have that, not only can you patch the data, but you can also install Rtl Debug Hooks which will hook everything you need and notify you.

Best regards,
Alex Ionescu