#1
|
||||
|
||||
How to change a filename in memory?
In the Documentation of VH2011 on this link in described at chapter 4 paragraph 4 a hook method described as:
Quote:
Please, someone could enlight me how to do such a opperation as change the name of a file in memory of a running program in such way that running program to call the dummy filename instead of the correct filename. A tutorial will pe highly apreciated. Thanks! |
#2
|
|||
|
|||
Giv I think that this step is more convenient
5. Memory Use OllyDbg or WinHex directly modify the memory of VFP p-code. VFP p-code can be change to: 0x01 0x76 0x68 0x28 0x29 0x0A ---- ------------------- ---- CMD vh() end VFP p-code reference: 0x01 0x44 0x4F 0x3F 0x0A ---- -------------- ---- CMD DO? end 0x01 0x2A 0x?? 0x?? 0x0A ---- -------------- ---- CMD *?? end 0x39 0xD5 0xFE ---- --------- READ EVENTS |
#3
|
||||
|
||||
K Goku,
Make a live tutorial for us to understand (pdf with pictures or live with flash movie) to understand your words. I'm not so familliar with these notions as you are. That's the reason for this request. |
#4
|
|||
|
|||
Hi Giv,
In VH2010, VH2011 has two examples about modify file name in memory. I have two folders extracted from VH2010 as illustrative examples. You unzip and run the file for reference readme.htm memory.zip |
The Following User Gave Reputation+1 to congviet For This Useful Post: | ||
giv (05-31-2011) |
#5
|
|||
|
|||
Quote:
Thanks. |
#6
|
|||
|
|||
Quote:
did you see the year of post?
__________________
I like this forum! |
The Following User Says Thank You to bolo2002 For This Useful Post: | ||
tonyweb (07-08-2018) |
#7
|
|||
|
|||
@giv:
Why you don't use WinHex ? |
#8
|
||||
|
||||
https://www69.zippyshare.com/v/AluAmqZi/file.html
__________________
Decode and Conquer |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Advanced IdaPython to change details UI cannot change | chants | General Discussion | 1 | 07-31-2019 15:46 |
how can i change my username | DMichael | General Discussion | 7 | 04-11-2015 18:50 |
change in VB EXE file. | ivanov | General Discussion | 17 | 12-28-2004 17:58 |