Hi,

Just want to patch the host of an application which is pcoded. I tried to find out the host in string and unicode but nothing found. Its encrypted and only decrypt while running application. I tried to put bp on gethostbyname i got that host in stack.... so now i tried to follow that one in dissambler but it gose into winsock section. So not possbile to make patches out there. Any suggestion or any tool. Which can help in this situtation to patch the host.

Application is vb

cheers,

editing the hosts file?

Thanks for the info. I know about it but i want to patch that link in application. Any idea how to fix that host in application.

you could append a stub to the end of the EXE that hooks gethostbyname and redirects it to a hook-function in your stub, and have the PE's entrypoint point to your stub, which then jumps back to the OEP.

4 VB P-Code , Use VBDecompiler.
Search the net 4 it.