Change PE header info slightly

spamtrap_at_crayne.org
Date: 03/01/05


Date: Tue, 1 Mar 2005 02:46:15 +0000 (UTC)

hi. im not big into asm but i can get around in a debugger enough to
find problems with programs.

i have a program that closes another when it detects that it is
running, based on PE header info (magic number etc...).

I tried a program to guard the processes from being terminated, but it
didnt work at all.

So my question is, can i slightly modify the .exe program so that the
other program doesn't close it.

i have PE explorer editor etc... but i could not change the values
without it becoming corrupt afterwards.

sorry im a nooB when it comes to this stuff. although im willing to
learn.

Thanks for any help!



Relevant Pages

  • Re: Disobeying jet engines - why?
    ... HIGH LEVEL LANGUAGES ... LIKE HEX or ASM need no debugger. ... programmed the knot. ...
    (sci.electronics.design)
  • Re: Disobeying jet engines - why?
    ... HIGH LEVEL LANGUAGES ... LIKE HEX or ASM need no debugger. ... programmed the knot. ...
    (sci.electronics.design)
  • Re: DLL Exports, determine Arg types and RetVal?
    ... OK, can you point me to any detailed information specific to the task of looking at function calls, args and RetVals in ASM that were originally coded in C/C++? ... is a C++ caller program. ... I can load this in a debugger, set a break point just before the call into the DLL functions, then single step in ASM, but I could be looking at anything! ...
    (alt.lang.asm)
  • Re: About Entity-Relationship Diagram in BDS 2007
    ... Some understanding of ASM is required, but there are some situations where it can be used without an extensive knowledge. ... Without the CPU view, you're stuck with introducing intermediate variables (may not be possible, f.i. ... return value of all these calls are placed in EAX, so just step over the calls and look at EAX, and you'll know which of the getter is returning a nil without getting into "step into" hell. ... Similar approach can be applied for math/conditionnal expressions, or parameter passing to a function in those circumstances when the debugger doesn't want to evaluate them... ...
    (borland.public.delphi.non-technical)
  • Re: Disobeying jet engines - why?
    ... LIKE HEX or ASM need no debugger (I ain't kidding). ... Well you do need a debugger above a certain code complexity allright. ...
    (sci.electronics.design)