Page 1 of 1

.exe editing

Posted: 18 Oct 2007, 13:11
by Cupis
Hey guys

i been working with some editing and tweaking of IRC , namely mirc, but i have been running into some problems.

I been using an application called PE Explorer and i been runing into problems recompiling the exe. first i thought i must have put in a bad value or something along those lines. but then i decided jsut to decomplie then recompile withought making any changes. what could be the problem?

is it could be i am missing a certain plugin, which that exe needs.

help would be much appreciation

Posted: 18 Oct 2007, 13:58
by hamin_aus
The most likely explanation is that mIRC have used some sort of tool to protect their executable against decompilers.

If you read the user license agreement for mIRC you will see that they explicitly forbid the use of decompilers or any sort of reverse engineering of their software.

Edit: Having said that, there is nothing wrong with being curious about how a piece of software works, especially if you paid for it ;)

Posted: 18 Oct 2007, 15:03
by Hex_Rated
If you read the user license agreement for mIRC you will see that they explicitly forbid the use of decompilers or any sort of reverse engineering of their software.
I think almost every EULA I have ever read has that clause in it. But to be honest, unless you steal something that's patented and sell it, you'll actually get away with ripping off their techniques and implementing them in your software. As long as you rewrite it and don't copy it byte for byte.

Posted: 18 Oct 2007, 15:33
by hamin_aus
Sure, I have used decompilers and hex editors on many executables without necessarily having permission ;)

Mostly just to alter certain functionality, or to make cosmetic changes to the layout....

Posted: 18 Oct 2007, 21:15
by Cupis
Exactly what i have been doing. im making like a bot program and ii am just editing the files and stuff to make my mirc just a little more specific to my bot needs and cosmetics :D

but maybe its a new version that forbids exe editing. cause i know with the older ones it was working :/ but mainly im jsut learning more about these things :) cause my end up goal would be to maybe write a whole new program but learning odd things hear and there.

nice becoming a moderator btw

Posted: 19 Oct 2007, 10:23
by defza
If the program does a checksum of some sort on itself when it starts up, then changing any value in the exe will break it.

You then need to make the checksum "work out" again. Either adding extra stuff, or changing the checksum to the new value generated by the edited exe.

Posted: 19 Oct 2007, 11:26
by Hex_Rated
Send PHR33K a PM. He messes around with decompilers so maybe he can help you.

Posted: 24 Oct 2007, 15:23
by SBSP
defza wrote:If the program does a checksum of some sort on itself when it starts up, then changing any value in the exe will break it.

You then need to make the checksum "work out" again. Either adding extra stuff, or changing the checksum to the new value generated by the edited exe.
Yes but he is not changing he is decompiling then recompiling. and it still wont work.
But could be what you said.

My guess is parts in the EXE is encrypted like most games. Then recompiling again its messed up.

I once opened BF2's EXE with in a decompiler and it told me straigh please close and open decompilers while launching the EXE with in the decompiler :oops:

What Jamin sais i was curious

Posted: 24 Oct 2007, 19:28
by PHR33K
jamin_za wrote:The most likely explanation is that mIRC have used some sort of tool to protect their executable against decompilers.

If you read the user license agreement for mIRC you will see that they explicitly forbid the use of decompilers or any sort of reverse engineering of their software.

Edit: Having said that, there is nothing wrong with being curious about how a piece of software works, especially if you paid for it ;)
Use OllyDbg rather than PE Explorer. You're probably messing the IAT up or something along those lines.
jamin_za wrote:The most likely explanation is that mIRC have used some sort of tool to protect their executable against decompilers.
mIRC doesnt have any such protection. I would say what I've done with my mIRC client... but its probably against the forum rules to promote cracking.
jamin_za wrote:Edit: Having said that, there is nothing wrong with being curious about how a piece of software works, especially if you paid for it ;)

Excuses Excuses! :D haha