Results 1 to 7 of 7

Thread: Resource Editing

  1. #1
    yan_kur
    Guest

    Resource Editing

    I try to edit resources (pictures) in an executable file compiled by visual basic 6. I use PE Explorer and Resource Hacker, but they can't find any picture, only the icon.
    Is there anyway to edit resources in an exe compiled by VB6??
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    To crash or not to crash
    Join Date
    Dec 2001
    Posts
    120
    No, there are no resources in a VB6 file. You have to get the location of the pictures yourself.

  3. #3
    yan_kur
    Guest
    How do I find the picture I want to edit?
    Can I edit the picture using hex editor? How?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4

    As Above

    There are 2 ways to go about doing this:

    Way number 1 - The picture file method
    ============================

    1. Here, the picture exists as a seperate .BMP/.JPG/.GIF whatever.

    2. Go to sysinternals.com

    3. Get FILEMON and REGMON

    4. Check to see which picture file is being accessed using FILEMON

    5. Check if the registry points to any picture file using REGMON

    6. Do not be surprised if the picture is not in the normal extension like .bmp or .jpg

    Way number 2 - The Binary method
    =========================

    1. You can assume that the picture is NOT in the VB6 executable

    2. But, it CAN be in the .DLLs that the VB6 program checks

    3. Get a dependency scanner (www.dependencywalker.com) and get going on the dlls accessed (including delay loaded and getproc-ed ones)

    4. Ignore the System dlls (kernel, advapi, user, etc)

    5. Resource edit those dll files that you find other that the above.

    Way number 3 - Highly difficult, but not impossible
    ===================================

    If the picture plays an important part, chances are, its going to be in the encrypted form. In this case, your best bet is to use a debugger and try to find out where the picture is being accessed. This is very difficult, but not impossible. For you to decrypt, and for the programmer to encrypt.

    Have Phun
    Blame Microsoft, get l337 !!

  5. #5
    yan_kur
    Guest
    It seems that the pictures are inside the code, no dlls, just vb runtime
    So they're encrypted in the exe file?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6

    As Above

    Quite possibly.

    Alternatively, it could be EMBEDDED in the code.

    Search the msgboard for BIOS cracking in Compaq for my reply on the COMPAQ bmp and how to extract it.

    It is also embedded.

    Have Phun,
    Blame Microsoft, get l337 !!

  7. #7
    yan_kur
    Guest
    Yeah, it's embedded in the code.
    I found the JFIF header and end of image, extract that block, open in mspaint, o yes that's the image I want to replace.
    I replace the block with my own jpeg block, now the application show my picture
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Replies: 3
    Last Post: April 19th, 2012, 05:37
  2. Resource
    By Jo_ti in forum The Newbie Forum
    Replies: 4
    Last Post: September 5th, 2009, 12:31
  3. Problems with Resource Editor
    By N8di8 in forum The Newbie Forum
    Replies: 2
    Last Post: May 31st, 2006, 00:55
  4. Need Help With Masm Dialog Resource File Data
    By kittmaster in forum The Newbie Forum
    Replies: 6
    Last Post: February 18th, 2006, 12:04
  5. Resource editors
    By ssb in forum Tools of Our Trade (TOT) Messageboard
    Replies: 14
    Last Post: March 14th, 2003, 01:42

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •