Log in

View Full Version : Any trick


w_a_r_1
July 9th, 2009, 22:03
Hi,

Just want to patch the host of an application which is pcoded. I tried to find out the host in string and unicode but nothing found. Its encrypted and only decrypt while running application. I tried to put bp on gethostbyname i got that host in stack.... so now i tried to follow that one in dissambler but it gose into winsock section. So not possbile to make patches out there. Any suggestion or any tool. Which can help in this situtation to patch the host.

Application is vb

cheers,

evlncrn8
July 10th, 2009, 01:20
editing the hosts file?

w_a_r_1
July 10th, 2009, 01:27
Thanks for the info. I know about it but i want to patch that link in application. Any idea how to fix that host in application.

disavowed
July 10th, 2009, 08:16
you could append a stub to the end of the EXE that hooks gethostbyname and redirects it to a hook-function in your stub, and have the PE's entrypoint point to your stub, which then jumps back to the OEP.

smart_boy
July 15th, 2009, 09:03
4 VB P-Code , Use VBDecompiler.
Search the net 4 it.