Since so many people are nagging to change it...
Requirments
-OLLYDBG.
-A Runnable (I used Xiao's Runnable FilelistSkip)
Step 1. Nop The Lines
Go to line ; 0049EF18
Alt+G
U'll see :
Code:
0049EF18 |. 884424 08 MOV BYTE PTR SS:[ESP+8],AL
0049EF1C |. 884424 0B MOV BYTE PTR SS:[ESP+B],AL
0049EF20 |. 8B4424 0C MOV EAX,DWORD PTR SS:[ESP+C]
0049EF24 |. C64424 09 80 MOV BYTE PTR SS:[ESP+9],80
0049EF29 |. C64424 0A 40 MOV BYTE PTR SS:[ESP+A],40
Nop That
Right Clik -> Binary -> Fill With N0PS
Step 2. Assamble
Then assamble on line 0049EF18 ;
Code:
MOV EAX,DWORD PTR SS:[ESP+C]
Space
Underthat, Jump to the Codecave.
Then Jump to the next code.
Now u should have somthing like This :
Code:
0049EF18 8B4424 0C MOV EAX,DWORD PTR SS:[ESP+C]
0049EF1C E9 C2611400 JMP xiao.005E50E3
0049EF21 EB 0B JMP SHORT xiao.0049EF2E
0049EF23 90 NOP
0049EF24 90 NOP
0049EF25 90 NOP
0049EF26 90 NOP
0049EF27 90 NOP
0049EF28 90 NOP
0049EF29 90 NOP
0049EF2A 90 NOP
0049EF2B 90 NOP
0049EF2C 90 NOP
0049EF2D 90 NOP
Step 3. Follow the Jump.
Go to Line 0049EF1C.
Follow that Line.
Enter
Ur now in a codecave. So lets code the Colors.
Step 4. Preparing the Colors.
Code:
MOV BYTE PTR SS:[ESP+8],0FF
Do that in 4 rows.
Example ;
Code:
005E50E3 C64424 08 FF MOV BYTE PTR SS:[ESP+8],0FF
005E50E8 C64424 08 FF MOV BYTE PTR SS:[ESP+8],0FF
005E50ED C64424 08 FF MOV BYTE PTR SS:[ESP+8],0FF
005E50F2 C64424 08 FF MOV BYTE PTR SS:[ESP+8],0FF
Now edit it ;
in row ;
8
9
A
B
To do this ; Rightclick > Binary > Edit And change the 08 to 09,
Next row ; 08 to 0A
Next row ; 08 to 0B
Now u should have somthing like this :
Code:
005E50E3 C64424 08 FF MOV BYTE PTR SS:[ESP+8],0FF
005E50E8 C64424 09 FF MOV BYTE PTR SS:[ESP+9],0FF
005E50ED C64424 0A FF MOV BYTE PTR SS:[ESP+A],0FF
005E50F2 C64424 0B FF MOV BYTE PTR SS:[ESP+B],0FF
Step 5. Coloring It
Well u all know RRGGBB? in HEX?
Like ; #FF0000 = Red
This is most like the same, only it has a Alpha Channel on it.
Line : 005E50E3 = RR
Line : 005E50E8 = GG
Line : 005E50ED = BB
Line : 005E50F2 = AA
Change the it however u like
Here is a Color Scheme
You must be registered to see links
Example for Red :
Code:
005E50E3 C64424 08 FF MOV BYTE PTR SS:[ESP+8],0FF // RED
005E50E8 C64424 09 00 MOV BYTE PTR SS:[ESP+9],0 // GREEN
005E50ED C64424 0A 00 MOV BYTE PTR SS:[ESP+A],0 // BLUE
005E50F2 C64424 0B FF MOV BYTE PTR SS:[ESP+B],0FF // ALPHA
Now lets make a Jump back.
Add Under the Alpha Line ;
Follow that line, and it would stand on the JMP SHORT.
Follow that and it would stand on ;
0049EF2E |. 8B4C24 08 MOV ECX,DWORD PTR SS:[ESP+8]
Well done, u colored ur Developer Grade.
Last Step! Saving
Right Click -> Copy To Executeable -> All Modifications -> Copy All -> Right Click On New Window -> Save File -> Name it & Save
Result
[URL="
Do this the same, but then with other Jumps. for Administrator.
And DONT NOP : MOV EAX,DWORD PTR SS:[ESP+C] by the admin, cause its on its correct place already
Administrator Line : 0049EF6C
Hope u got it!
Sorry for my crappy explanations, but gave enough code for u to do it.
Credits ASM Tut : Sayuta (Counterweight)