4 replies to this topic

[cYthOn]

Hello everybody

I have a little problem.. I came across an exe to know the hard drive information of computers
It seems it was packed with UPX.
What I did was first unpack it to the original exe with an upx unpacker.
Then it seems it has been compiled with pascal

Now what I want to do is look into the code and edit it to my own needs and then recompile it.
The problem is that it is an exe and that I don't know where to begin..

Can anybody help me please ?

[FTPServerTools]

If it is packed with upx then unpack it with upx.. upx -d filename.exe and that should suffice. Sometimes upx files are 'protected' tho so then you need to use an alternate way. Meaning you have to unpack it in memory and dump the memory to a new exe which you also have to repair. That is more work and not for beginners.

[cYthOn]

If it is packed with upx then unpack it with upx.. upx -d filename.exe and that should suffice. Sometimes upx files are 'protected' tho so then you need to use an alternate way. Meaning you have to unpack it in memory and dump the memory to a new exe which you also have to repair. That is more work and not for beginners.

THanks for your reply
Well That's what I did as I said, I unpacked it with upx, but then i want to edit the code but I cant open the exe then

[hugopnr]

If you need ASM code to add some jumps, etc just use a dissassembler (like OllyDbg) but if you are looking for a high level code like C or Pascal you must use a decompiler, I dunno if any exists for pascal (if you are sure it is pascal !) gooogle up ...

[saintfiends]

I dont think there are any, except for the .Net version of it. If thats the case Reflector is pretty good.