SYNTAX

    patchdata [options] [<dll-name>] [<ordinal>] [<value>]


OPTIONS

-h (--help) bool

Display help.

-v (--verbose) bool

Display verbose information when scanning for exports.


ARGUMENTS

[<dll-name>]

The DLL to examine for patchable data. If not specified, list some system-wide well-known patchable constants. [string]

[<ordinal>]

The ordinal of the patchable constant to examine. This should be the number from the DEF file, ie it is one-based not zero-based. If not specified lists all the data exports in the DLL. [int]

[<value>]

Set a new value for the given ordinal. If not specified, just lists the current value. [uint]


DESCRIPTION

Examine the patchable data for a DLL.

If no DLL is specified, print various common patchable constant data values. If a DLL is given but no ordinal number, all exports that look like patchable constants are listed. For DLLs in core (xip) ROM, you'll generally see more false positives than ROFS DLLs.

Patchdata can optionally modify the value of a given patchable constant, but there are certain caveats in doing this: Overall the technique used is slightly hairy, use at your own risk: it will not work for DLLs with sparse export tables (generally this means DLLs with lots of exports and/or ABSENT exports); it may appear to work but in some situations code will continue to use the unpatched values (patching EXEXPs used in startup, ECOM plugins that have already been cached, and anything else that hard-codes loading DLLs from a particular drive). Patching a DLL that is in core (xip) image will only persist until the next reboot, but on the plus side most of the other caveats don't apply.


COPYRIGHT

Copyright (c) 2008-2010 Accenture. All rights reserved.