hi guys

i was wondering if anybody could help me , im trying to change the addr located at PEB->processHeap to point to a different memory block , now i have change it successfully , and i have copied the old block it pointed too, to a new block.

i was sure this was gonna do it ..but now i get Access violations in the Heap Functions , and im wondering if anybody has done similar ? or has some documents or idea's for reading material to save me the time of having to go trough the Heap functions 1 by 1 to see what the error might be.

cheers

Maybe your block is read protected? You could try to use VirtualProtectEx function to allow read/write access to that block of memory...

Cheers

Nacho_dj