GIL Posted December 24, 2006 Share Posted December 24, 2006 I do not know VS.NET programming but but would like to know what application I need in order to edit an .EXE 's bitmap resources, I've downloaded decompilers that show them to me but do not edit them. Link to comment Share on other sites More sharing options...
Colonel Posted December 24, 2006 Share Posted December 24, 2006 That has nothing to do with VS.NET.Look at http://www.resedit.net/ or http://www.heaventools.com/resource-tuner.htm Link to comment Share on other sites More sharing options...
GIL Posted December 25, 2006 Author Share Posted December 25, 2006 (edited) That has nothing to do with VS.NET.Look at http://www.resedit.net/ or http://www.heaventools.com/resource-tuner.htmWell, let me be more especific.I want to edit synctoy.exe, The Syncronization Powertoy.I would like to edit it's BMPs, but, it cannot be done with resource hacker or others like that, because it's compiled in VS.NET for what I gather. I downloaded a program; 'Reflector', that lets me SEE the resources, so I know images like SyncToyUI.Leftgraphic.bmp are there, but haven't been able to edit them.How can I take that exe, edit the bitmaps, and have it working. Even if I have to recompile in the process, but how?... very detailed please. Edited December 25, 2006 by GIL Link to comment Share on other sites More sharing options...
LLXX Posted December 26, 2006 Share Posted December 26, 2006 Hex editor. Extract the bitmap to a separate file, edit and save, then copy+paste back into the original file. Link to comment Share on other sites More sharing options...
GIL Posted December 27, 2006 Author Share Posted December 27, 2006 Hex editor. Extract the bitmap to a separate file, edit and save, then copy+paste back into the original file.No use man. No Hexeditor detects theses bitmaps. Internally they're not otdinary resources but they ARE there, and seem to be valid. I edited just a pixed and it opens the debuger. Like some kind of header was lost when saving it or something. if someone would just download the SYNCTOY and try to edit the bitmaps.No just anybody can accept the challenge. Link to comment Share on other sites More sharing options...
LLXX Posted December 27, 2006 Share Posted December 27, 2006 (edited) Are you sure you found it? Some other things like import tables can appear to be bitmaps... Edited December 27, 2006 by LLXX Link to comment Share on other sites More sharing options...
GIL Posted December 27, 2006 Author Share Posted December 27, 2006 Fairly enough. It had the BM header, I search for a chain of pixels of speficic colors that appeared in the image side by side, they were there, BGR BGR ..., I've done that kind of thing with other EXEs, but I tell ya, it's got some kind fa trick, maybe it counter checks itself? against... something? Link to comment Share on other sites More sharing options...
LLXX Posted December 28, 2006 Share Posted December 28, 2006 There also appears to be a few GIFs in there.The 4 bytes following "BM" indicate how long the data is. Do not change the size of the data or you'll corrupt the whole executable. Link to comment Share on other sites More sharing options...
GIL Posted December 28, 2006 Author Share Posted December 28, 2006 (edited) I replaced bytes not added, and I did after the whole header, where it clearly had the image data.So, did you changed a BMP suscessfully?If so, what software or method did you use? Edited December 28, 2006 by GIL Link to comment Share on other sites More sharing options...
GIL Posted December 28, 2006 Author Share Posted December 28, 2006 This is really something.I wrote a script for mIRC (I made someone laugh) it can extract the BMPs and replace them with new ones.this is really weird the BMPs are repeated in deferent parts of the file.I edited the extracted bitmaps with mspaint for simplicity got same sized files but opted to insert only the image data because in the four times repeated file theres seem to be an odd one, the bytes that indicate the size of the file IF they where compressed, which there not, was not set to 0, but this is supposed to not matter if theres no compression, even so I just edited the image data.I edited the bytes with the edited BMP, but it had the same image, so I could test if the process of edited the file was damaging it. Did not, it worked. But if I insert a different image, it does load, I edited the four images, and every one individually with the same result.Its not a built in pallete because I used an included color.Is there any kind of protection that work like this?Could it be adding the value of each byte and comparing it with a preset value?I KNOW the process of editing it could be called flawless, so what kind a protection does it have?Theres gotta be some kind of precedent, or let's make this one. Link to comment Share on other sites More sharing options...
LLXX Posted December 29, 2006 Share Posted December 29, 2006 I wrote a script for mIRC (I made someone laugh)You just made another one laugh Seriously, learn a real scripting language like Perl.I remember .NET programs can have some "integrity verification" - I forgot the term (locked assembly? fixed assembly?) but a few Googles should get some. I don't work with .NET much, if at all. Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted January 12, 2007 Share Posted January 12, 2007 Use a ResourcenEditor and edit the bmps. They are located in <VS8Dir>\Common7\IDE\1033\msenvui.dll and <VS8Dir>\Common7\IDE\1033\vsmsoui.dll Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now