Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 04-29-2020, 10:49
atom0s's Avatar
atom0s atom0s is offline
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 431
Rept. Given: 26
Rept. Rcvd 130 Times in 67 Posts
Thanks Given: 54
Thanks Rcvd at 837 Times in 306 Posts
atom0s Reputation: 100-199 atom0s Reputation: 100-199
You can lookup the proper translation ids that the file offers via: VerQueryValueA/VerQueryValueW
They can be requested via the following lookup property: \\VarFileInfo\\Translation

MSDN shows an example of doing that here:
https://docs.microsoft.com/en-us/windows/win32/api/winver/nf-winver-verqueryvaluea

This way you don't have to hardcode it to English only, or guess. Using GetACP won't guarantee a valid number either, as that is specific to the system and not the file.
__________________
Personal Projects Site: https://atom0s.com
Reply With Quote
The Following User Says Thank You to atom0s For This Useful Post:
phroyt (04-29-2020)
  #2  
Old 04-29-2020, 11:06
phroyt phroyt is offline
Friend
 
Join Date: May 2018
Posts: 77
Rept. Given: 0
Rept. Rcvd 8 Times in 4 Posts
Thanks Given: 35
Thanks Rcvd at 106 Times in 40 Posts
phroyt Reputation: 8
What kind of protection is this below?

Code:
https://i.stack.imgur.com/70pG4.png
I can't read the resources in standard way.
Even save after changes.

Tried to inject a DLL using LordPE but it's also blocked.
Attached Images
File Type: png 70pG4.png (81.4 KB, 4 views)

Last edited by phroyt; 04-29-2020 at 11:12.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Reading process memory FEARHQ General Discussion 10 01-22-2005 21:24
Is it possbile to play a file from the memory without caching it on the HDD? raladin General Discussion 10 04-22-2004 01:49


All times are GMT +8. The time now is 00:12.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )