|
Giv I think that this step is more convenient
5. Memory
Use OllyDbg or WinHex directly modify the memory of VFP p-code.
VFP p-code can be change to:
0x01 0x76 0x68 0x28 0x29 0x0A
---- ------------------- ----
CMD vh() end
VFP p-code reference:
0x01 0x44 0x4F 0x3F 0x0A
---- -------------- ----
CMD DO? end
0x01 0x2A 0x?? 0x?? 0x0A
---- -------------- ----
CMD *?? end
0x39 0xD5 0xFE
---- ---------
READ EVENTS
|