Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [exe]

Use this tag when referring to a true .EXE file as opposed to a .COM or .MSI or any other executable.

0
votes
0answers
67 views

How to Decipher assembled code?

I have an application I am trying to reverse engineer that was built using a graphics engine called Ogre3D. I obviously don't have the original source code that was used to build this particular game. ...
3
votes
1answer
104 views

Certain bytes in the memory (RAM) get changed after the program starts. Why?

I'm in a situation where I have an executable file. When I start it within the debugger (x32dbg), with breakpoints set to every occasion (DLL entry, DLL load, Thread start,..), to restrict the amount ...
0
votes
1answer
190 views

How to export function from exe file?

I open exe file (running on Windows) in Ida , and saw a function (for example sub_ABC) that I want to export , so I can call this function from c# code. How can I export function that I Know the name ...
3
votes
1answer
128 views

How to wrap dump process and execute it in another PC

I debug exe file in Ida , and put breakpoint in some address. I want to create a dump of this process that I can continue running it in another Pc (without Ida) from the point I pause it with ...
4
votes
3answers
186 views

How to run part of exe file that is being reversed

I reverse exe file with IDA, there is a function (that is running some other function) that I don't want to understand how it works, but I want to run it. How can I run an exe file from a specific ...
1
vote
1answer
264 views

I want to decompile a exe and change the code to not need Admin to run

I want to decompile an .exe and change the code to not need Admin to run. I know that it does something with: <requestedPrivileges> <requestedExecutionLevel level="requireAdministrator" ...
12
votes
2answers
3k views

What kind of code would produce this assemby with loads of jump statements?

00EE16CC . E9 DFBB0000 JMP BinFile.00EED2B0 00EE16D1 . E9 64AF0000 JMP <JMP.&MSVCP140D.?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@> 00EE16D6 . E9 15DB0000 JMP BinFile....
9
votes
3answers
615 views

Is there any way to get my own image base without calling any WinAPI functions, such as GetModuleHandle?

Is there any way to get the image base of an .exe without calling WinAPI functions (i.e. imported functions) so that it can't be easily viewed in a disassembler/debugger? I've been thinking of ...
1
vote
1answer
106 views

Why doesn't IDA break on the WriteFile function?

I searched all places in IDA that call the imported WriteFile function and put a breakpoint on them. But while debugging I saw with ProcMon that my exe wrote to the file but even though it did not ...
2
votes
0answers
50 views

Catch connection string between exe and mdb

I have an exe file that read and write from a local DB file. I checked this file with Detect It Easy and it shows that this is a mdb file. I can open this file with microsoft access, and watch all ...
2
votes
1answer
277 views

How to see all my comments on idb file

I add some comments to exe file with ida(save on idb). Is there any simple way how to see all my comments in 1 windows?
1
vote
0answers
231 views

Dump c++ class definitions from .exe + .pdb on windows

Is there any way to dump C++ class definitions on windows if executable and PDB files are available. I've seen this done before using gdb but haven't had any luck doing this on windows. I've tried ...
1
vote
0answers
414 views

Decompiling or modifying .exe file generated from .jar

I have one .exe file which is generated from .jar file but I'm not sure how it was made. I cannot open it with winrar or something. I need to modify it or just to decompile it. Any answer should be ...
2
votes
1answer
770 views

How to change the strings in rdata section of a executable file?

I'm a programmer and have an application (an executable file that maybe compiled from a c++ source). It has an rdata section (read-only data section) that include many (several thousand) strings of ...
0
votes
1answer
146 views

Change URL a program sends data to

I'm pretty new to reverse engineering, and I have several times seen that programs make requests to certain websites with specific host names. I tried to use a debugger and checked for the URL it ...
2
votes
1answer
94 views

Help reading a variable from an address in an executable?

** Edit ** After some great help from @tylernygaard I have discovered that the same variable is being written to two difference places in the memory. They are both 'static' addresses. Problem solved. ...
2
votes
1answer
1k views

Is it possible to extract / read a variable out of a running .exe file?

I am completely new to Windows programming so please excuse any naivety on my part when asking this question. I'll briefly describe my situation and then hopefully you'll be able to answer my question....
-2
votes
1answer
230 views

Crack an executable in PE [closed]

So I noticed that I can write something in PE from the executable For example if I write 1911 he tells me [!]Cracked By RAZOR 1911 But if I write something else it will not tell me anything. What ...
-1
votes
1answer
481 views

Trying To Read Code From Call of Duty [closed]

Before I begin I want to say for whatever reason the site wouldn't let me post this unless I didn't have the coding so I just linked it instead of it being here. This is most likely the most stupid ...
-2
votes
1answer
240 views

EXE Encryption Techniques

Are there any tutorials available for learning how to do encryption of an EXE ? I am particular interested on how it decrypt's itself and runs in memory. If there are any tutorials or post that ...
-1
votes
2answers
6k views

How to extract code form .exe file having signature Borland Delphi 6.0 - 7.0 [Overlay] [closed]

when i input .exe file to PEiD v0.95 it gives output like "Borland Delphi 6.0 - 7.0 [Overlay]" Now i want to retrieve code from .exe file. So how to do that . Can any one give me right path for that.
0
votes
1answer
1k views

Is it possible to decompile an executable into Visual Basic source code when you do not know what language the program was written in?

I need to decompile an executable file into its source code and put the source code together again in such a way that it can be recompiled and work as it should. The only issue that I have with this ...
1
vote
0answers
3k views

How to turn a .dll file into a .exe file for ollydbg?

I have a dll file which I want to analyze/debug. To do that, I use ollydbg. But when I open the file with ollydbg then the following message appears : File 'C:\..........\Conficker.exe' is a ...