Waste0fTime
31st May 2006, 03:36
Well, I finally decided to quit being lazy, and start up a UCE project.
I messed up horribly the first time, now here is where I am at:
Now we will replace all those mentioned strings to something else. like so.
VQE ---> Whatever4
OP ---> Whatever5
OT ---> Whatever6
NOP ---> Whatever7
RPM ---> Whatever8
WPM ---> Whatever9
VAE ---> Whatever10
Use the replace function and Search for "whole words only", ORIGIN select "Entire Scope". And you replace ie. GetSDTShadow
Only replace GetSDTShadow and not GetSDT or TGetSDTShadow.
So I understand that I need to go into newkernelhandler.pas, DBK32functions.pas, DBK32.dpr directories, and change all the strings that are detected to something else.
My question is, when I do a search for say "OP" I get about 42 matches for words with OP in them, such as words like "stOP" and so on. Do I change every single word in the directory that has an OP in it, to Whatever5? So if I see something that says:
*line 16: type TStopDebugging=function: BOOL; stdcall;
Is it supposed to be changed to TstWhatever5Debugging=function: BOOL; stdcall;
Or am I just going at these strings all wrong?
I messed up horribly the first time, now here is where I am at:
Now we will replace all those mentioned strings to something else. like so.
VQE ---> Whatever4
OP ---> Whatever5
OT ---> Whatever6
NOP ---> Whatever7
RPM ---> Whatever8
WPM ---> Whatever9
VAE ---> Whatever10
Use the replace function and Search for "whole words only", ORIGIN select "Entire Scope". And you replace ie. GetSDTShadow
Only replace GetSDTShadow and not GetSDT or TGetSDTShadow.
So I understand that I need to go into newkernelhandler.pas, DBK32functions.pas, DBK32.dpr directories, and change all the strings that are detected to something else.
My question is, when I do a search for say "OP" I get about 42 matches for words with OP in them, such as words like "stOP" and so on. Do I change every single word in the directory that has an OP in it, to Whatever5? So if I see something that says:
*line 16: type TStopDebugging=function: BOOL; stdcall;
Is it supposed to be changed to TstWhatever5Debugging=function: BOOL; stdcall;
Or am I just going at these strings all wrong?