[Source] Exp Table Editor

A bytesearcher can do that easily though, it also removes the possibility of finding duplicate exp tables

If a person knows how to make jumps to alter the asm, he will know how to find the address of the exp table and won't need auto-detection anyway ^^

Quote:

---

Originally Posted by Filterheadz

If a person knows how to make jumps to alter the asm,

---

I certainly do.

Quote:

---

Originally Posted by Filterheadz

he will know how to find the address of the exp table

---

Hmm, well, I've scratched my head over and over and I absolutely cannot imagine how this could be done. :lol:

Attached, basic build of the main program, made with BCB5. Ofc the DLL and injection doesn't work right just now, but it's not working for me with the original binary. :S: (used to)

Also discovered it breaks NT4. (CreateToolhelp32 is not supported) So I'm going to try to find a way around that as well as fix the DLL injection link (without Indy) before I post the source. But people may like to play with the UI now it has no Chat and is simplified a little.

http://oi40.tinypic.com/33b05qw.jpg

Attachment 97438

--- EDIT ---
Changed my mind on that. I'm posting the source modifications below.

Changes:-

• Have removed Indy (TCP/IP) components from the DLL too.
  Of course, the DLL injection part doesn't work without the Indy components, so an alternative still needs implementing.
  All the Indy stuff is just commented out.
• The interprocess communication can be done in several ways, or replaced all-together.
  (mentioned above, by self-hosting the executable)
• Made a BCB5 project group which will build both exe and dll in one fell swoop.
  (again mentioned above, freely available)
• I'm not including binary cached .res files because they can be re-created when the project(s) are opened.
  (You will get two warning dialogues about this when you first open it)
• The UI changes I've already made do nothing except make it a more "Windows standard" UI and take out the chat.
  (They do reduce CPU load by disabling scrolling title bar fluff, as well, but...)
• Changes from Unicode to ANSI / WideChar had to be done as BCB5 (and even 6) just don't support Unicode automatically, and don't need to either.

So the code is now in a form that any programmer can see what it did on BCB 2010 and find an alternative for them self with a compiler they can download and install for free.

Source files now attached. :thumbup:
Attachment 97462

Okay it says address, where can i find the good address? And what is meant by divided by and multiply by???
(it is by the way v1)

The idea is that the injected DLL will find the correct address. It kinda works.