Adding Sections
-
- DBfiller
- Posts: 3816
- Joined: Fri Oct 31, 2003 5:30 am
- Location: San Diego CA, USA
- Contact:
lol.... huhuhahah is never coming back, i think you can find an empty section, ask gscharlie wrote: Huhuhaha if you still read this area can you teach me what you used to add sections? ive been bafflied for a long time
<img src='http://img88.exs.cx/img88/2290/7666.jpg' border='0' alt='user posted image' />
-
- <3 bd long time
- Posts: 869
- Joined: Fri Nov 14, 2003 12:08 am
- Location: binarys underpants
- Contact:
I used LordPE once, but I couldn't quite figure out how to do it
<img src='http://deli.lazyslacker.com/stupidnigga.jpg' border='0' alt='user posted image' /><br><a href='http://deli.lazyslacker.com' target='_blank'>http://deli.lazyslacker.com</a><br>Don't ban me, ban the idiot!
This is to answer binarydata & charlie's question.
I'm very lazy to explain. So I use the old helgame v2.95 2003-11-05 as an example.
1. I add a 'filler'/empty section header (VOffset=00172000 VSize=0008E000) so that the next section will start at address 0x600000 (VOffset 0x200000). I do that bcoz I'm a lazy fuck & want to reuse the code from the older hack by simply add the section with the code.
2. I add the real section that I will use to add the hack codes. You can either use load section from file (will set the RSize to the size of the filesize), or add the section header (note, RSize is still 0, meaning you cannot save the data to that section in the exe yet) & then either rebuild it using makepe or pad & edit the header again or some other way u prefer.
Remember to set the section so that 'uninitialiazed data' flag is unchecked. This is important if you plan to compress your exe later since compressor like UPX will ignore the data contained in it.
- PE optimizer/rebuilder normally truncate the trailing chunk of 0 bytes of the end of each sections.
- RSize is how many bytes of the section are in the exe. The remaining bytes are interpreted as 0 bytes & can be accessed physically (you can only modify it virtually --> in the memory) unless you rebuild it.
here is the old helfart (helgame v2.95 2003-11-05)
<a href='http://www.geocities.com/siementechsux/v2.95.zip' target='_blank'>http://www.geocities.com/siementechsux/v2.95.zip</a>
Do what ever you want with it. I will remove it in few days time.
I'm very lazy to explain. So I use the old helgame v2.95 2003-11-05 as an example.
1. I add a 'filler'/empty section header (VOffset=00172000 VSize=0008E000) so that the next section will start at address 0x600000 (VOffset 0x200000). I do that bcoz I'm a lazy fuck & want to reuse the code from the older hack by simply add the section with the code.
2. I add the real section that I will use to add the hack codes. You can either use load section from file (will set the RSize to the size of the filesize), or add the section header (note, RSize is still 0, meaning you cannot save the data to that section in the exe yet) & then either rebuild it using makepe or pad & edit the header again or some other way u prefer.
Remember to set the section so that 'uninitialiazed data' flag is unchecked. This is important if you plan to compress your exe later since compressor like UPX will ignore the data contained in it.
- PE optimizer/rebuilder normally truncate the trailing chunk of 0 bytes of the end of each sections.
- RSize is how many bytes of the section are in the exe. The remaining bytes are interpreted as 0 bytes & can be accessed physically (you can only modify it virtually --> in the memory) unless you rebuild it.
here is the old helfart (helgame v2.95 2003-11-05)
<a href='http://www.geocities.com/siementechsux/v2.95.zip' target='_blank'>http://www.geocities.com/siementechsux/v2.95.zip</a>
Do what ever you want with it. I will remove it in few days time.
hey when you load section do you add a file? or what :SYou can either use load section from file (will set the RSize to the size of the filesize), or add the section header (note, RSize is still 0, meaning you cannot save the data to that section in the exe yet) & then either rebuild it using makepe or pad & edit the header again or some other way u prefer
Girlfriends are dedicated hookers.
<a href='http://outpostbb.ionichost.com/junk/Sadd10.zip' target='_blank'>http://outpostbb.ionichost.com/junk/Sadd10.zip</a>
Girlfriends are dedicated hookers.