Can someone with WinAPI and Delphi voodoo knowledge please proofread this blog entry and see if the core of this article makes sense?

Can someone with WinAPI and Delphi voodoo knowledge please proofread this blog entry and see if the core of this article makes sense? 
I'm esp. curious if the the selection of snippets out of the original source for the article is correct.

https://compilerintrinsics.wordpress.com/2016/03/27/altering-delphi-applications-without-access-to-the-source-code/
https://compilerintrinsics.wordpress.com/2016/03/27/altering-delphi-applications-without-access-to-the-source-code

Comments

  1. David Millington
    >Re: offsets....
    Yes, single exe. When it comes to packages I'm clueless.

    ReplyDelete
  2. David Millington

    >But wait a second - doesn't GetMem call the MM's GetMem function? So the MM that's installed doesn't matter, you just want to find the RTL method?
    No GetMem does not!  In a bog standard delphi 567 GetMem just gets to work. There's no
    mov eax,[MemManRecord.GetMem]
    jmp [eax]
    code in there. I was surprised by that as well.

    ReplyDelete
  3. Johan Bontes Thanks. On my site you will find the link to my email. At "Contact Us"

    ReplyDelete

Post a Comment