AKA Posted June 7, 2010 Share Posted June 7, 2010 is any possibility to change the binaries dump data in compresed exe ? E8 27 C2 00 00 E9 79 FE FF FF 55 8B EC 83 EC 08 http://img101.imageshack.us/img101/7703/printt.jpg (this is uithout UPX compresed.) With UPX, is diferit but the same to all autoit exe. How i obtain this? Open exe with ollydbg , find the selected row, right click, folow the dump. is any possibility to change this ? Link to comment Share on other sites More sharing options...
jchd Posted June 7, 2010 Share Posted June 7, 2010 Is there only one legitimate reason to mess up with executables this way (AutoIt or else)? This wonderful site allows debugging and testing regular expressions (many flavors available). An absolute must have in your bookmarks.Another excellent RegExp tutorial. Don't forget downloading your copy of up-to-date pcretest.exe and pcregrep.exe hereRegExp tutorial: enough to get startedPCRE v8.33 regexp documentation latest available release and currently implemented in AutoIt beta. SQLitespeed is another feature-rich premier SQLite manager (includes import/export). Well worth a try.SQLite Expert (freeware Personal Edition or payware Pro version) is a very useful SQLite database manager.An excellent eBook covering almost every aspect of SQLite3: a must-read for anyone doing serious work.SQL tutorial (covers "generic" SQL, but most of it applies to SQLite as well)A work-in-progress SQLite3 tutorial. Don't miss other LxyzTHW pages!SQLite official website with full documentation (may be newer than the SQLite library that comes standard with AutoIt) Link to comment Share on other sites More sharing options...
AKA Posted June 8, 2010 Author Share Posted June 8, 2010 I need just a metod to change this hex code. Link to comment Share on other sites More sharing options...
rudi Posted June 8, 2010 Share Posted June 8, 2010 Hi.is any possibility to change the binaries dump data in compresed exe ?1.) uncompress your exe2.) stringreplace() or stringregexpreplace()3.) compress your exeRegards, Rudi. Earth is flat, pigs can fly, and Nuclear Power is SAFE! Link to comment Share on other sites More sharing options...
rudi Posted June 8, 2010 Share Posted June 8, 2010 Hi.Please prefere post in the forum instead of using PMSent 3 minutes agohttp://www.autoitscript.com/forum/index.php?showtopic=1155091.) uncompress your exe2.) stringreplace() or stringregexpreplace()3.) compress your exeRegards, Rudi. Tnx, but how this work? In script i don't have any string to replace. Can you explain me more in detail please ? Then I didn't get what you need, sorry!I thought, that you want to change some hex values your image is displaying?Regards, Rudi. Earth is flat, pigs can fly, and Nuclear Power is SAFE! Link to comment Share on other sites More sharing options...
AKA Posted June 8, 2010 Author Share Posted June 8, 2010 I want to change 1-2 caracter in hex code, to be different codes between autoit exe. All are the same this is my problem, is any posibility to change one or more hex code? Image is just an exemple, to what i need. Link to comment Share on other sites More sharing options...
PsaltyDS Posted June 8, 2010 Share Posted June 8, 2010 Editing any file in binary is trivial: FileOpen() in binary mode FileRead() FileClose() Modify data FileOpen() in binary write mode FileWrite() FileClose() But you should have been able to figure that out in ten minutes with the help file. How did you get to know enough about the file format to want to hex edit it without learning basics like how to read and write a file? What's the real question here? Valuater's AutoIt 1-2-3, Class... Is now in Session!For those who want somebody to write the script for them: RentACoder"Any technology distinguishable from magic is insufficiently advanced." -- Geek's corollary to Clarke's law Link to comment Share on other sites More sharing options...
AKA Posted June 8, 2010 Author Share Posted June 8, 2010 PsaltyDS - destroy the file that way If i disable UPX compresion in aut2exe is change the hex code,and all uncompresed exe have a same code. I think is in the compilation. It is some kind of setting that influences this? Link to comment Share on other sites More sharing options...
Mobius Posted June 8, 2010 Share Posted June 8, 2010 (edited) ~ Edited March 2, 2011 by Mobius Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now