EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Software Release

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-03-2004, 21:16
marco62
Guest
 
Posts: n/a
PE Explorer v1.96

A PE file (¡°portable executable¡±) is the native format of executable binaries (DLL¡¯s, drivers and programs) for the Microsoft Windows® 9x/ME/NT/2000/XP/CE 32-bit operating systems.
PE Explorer can handle a variety of different PE file types: EXE, DLL, SYS, DRV, MSSTYLE, CPL, OCX, BPL, DPL, SCR, FLT and more (including executable files that run on MS Windows CE platform).



PE Explorer contains these features:

General features

Working with PE files such as exe, dll, sys, msstyles, bpl, dpl, cpl, ocx, acm, ax, scr and other win32 executables.
The ability to open a broken or packed file in Safe mode.
Verifying a PE file's integrity.
Support for custom plug-ins to perform any startup processing.
Saving changes to disk as a new image file.
Customizing the general, view and logging settings. You can set the default Viewer at startup using View>Customize>General Tab.

Advanced features

Headers Info Viewer displays the header information contained in the PE file header.
Checksum computing and modification.
Entry Point value modification.
Data Directories Viewer to view and edit Data Directories.
Sections Header Viewer to view, extract, recalculate or delete sections from the program body.
Section Editor to change all the fields in the section header or repair and restore the damaged section headers settings.
Export, Import and Delay Import Viewers.
Quick Function Syntax Lookup displays the calling syntax for the found functions.
Syntax Description Editor for adding custom comments, altering values or creating new library descriptions.
Unmangling the exported symbols.
Debug Info Viewer to view the debug information contained in the file.
Relocation Viewer to view contents of the base relocation table.
Resource Editor to view, delete, extract or modify nearly every type of resources.
XP Visual Style Manifest Wizard inserts Windows XP user interface manifests in existing applications - an easy way for legacy applications take advantage of the new look for common control styles on Windows XP.

Power Coder Tools

Powerful yet easy-to-use Disassembler.
Dependency Scanner traces the dependency chain for the program's libraries.
TimeDateStamp Adjuster modifies all the TimeDate Stamps to one uniform value.
Remove Debug Info Tool strips the various types of debug information stored in the file.
Remove Relocations Tool strips the table of base relocations from the EXE files and saves space.

Home page: hxxp://www.heaventools.com
Download: hxxp://www.heaventools.com/download/pexsetup.exe

I use *** DiESELMuSA *** ARteeam Patcher but litle modified.
Here is the patch for this great tool.
Attached Files
File Type: rar pexplorer_patch.rar‎ (35.5 KB, 141 views)
Reply With Quote
  #2  
Old 11-05-2004, 02:12
Crk
Guest
 
Posts: n/a
Thumbs down

it crash under win9x can't even open it
Reply With Quote
  #3  
Old 11-05-2004, 02:39
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 532
Thanks: 0
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
MaRKuS-DJM is an unknown quantity at this point
ReaL|sTy's generic crack still works.
Reply With Quote
  #4  
Old 11-05-2004, 16:05
marco62
Guest
 
Posts: n/a
Sorry

Try now.....
Attached Files
File Type: rar pexplorer_patch.rar‎ (13.5 KB, 91 views)
Reply With Quote
  #5  
Old 11-05-2004, 17:50
britedream britedream is offline
VIP
 
Join Date: Jun 2002
Posts: 433
Thanks: 0
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
britedream is an unknown quantity at this point
if you want to register it, as I indicated in this forum long time ago, look at the following:

00587C3A 8078 24 01 CMP BYTE PTR DS:[EAX+24],1 ; check if entrering registration
00587C3E 75 08 JNZ SHORT pexplore.00587C48
00587C40 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10]
00587C43 E8 7CA6FFFF CALL pexplore.005822C4 ; this call check registration
00587C48 E8 C735FFFF CALL pexplore.0057B214
00587C4D C645 C3 00 MOV BYTE PTR SS:[EBP-3D],0
00587C51 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10]
00587C54 80B8 5C020000 0>CMP BYTE PTR DS:[EAX+25C],0 ; compare if registered
00587C5B 0F85 770A0000 JNZ pexplore.005886D8 ; jmp to act as reg


change the last jnz to jmp after entering code , otherwise u will not be able to do so.

after entering the call above you will see this:


005823A7 /0F85 79010000 JNZ pexplore.00582526 ; nop this jnz
005823AD |8D4D B4 LEA ECX,DWORD PTR SS:[EBP-4C]
005823B0 |BA 08000000 MOV EDX,8
005823B5 |8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]
005823B8 |E8 6750E8FF CALL pexplore.00407424
005823BD |8B55 B4 MOV EDX,DWORD PTR SS:[EBP-4C]
005823C0 |8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C] ; change 1c to 4c for reg
005823C3 |E8 D419E8FF CALL pexplore.00403D9C
005823C8 |0F85 58010000 JNZ pexplore.00582526

please note there is jl above that , this is to check the code length, you can nop it if you want to enter any code length , otherwise fill the whole code field.[no less than 16 digit]

if you do as I outlined , and saved changes,you will have it registered in your name.
[note]
this is not working well, I found out that it removes the patch, I will see what I can do.

problem solved:
patch address 5af834 to be "01" instead of "00".


for those who have different address than mine , I will make it easy for you, in dump search for 01 04 11 17 and count 6 lines above that, on the sixth line[view hex as 8 byte] change 00 to 01 and save.

britedream

Last edited by britedream; 11-07-2004 at 15:59.
Reply With Quote
  #6  
Old 11-05-2004, 23:53
Crk
Guest
 
Posts: n/a
ReaL|sTy's generic crack still works.

i forgot to use it.. yes it's still kicking ass.... don't need to use any other crack
Reply With Quote
  #7  
Old 04-27-2005, 10:08
TQN TQN is offline
VIP
 
Join Date: Apr 2003
Location: Vietnam
Posts: 238
Thanks: 11
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
TQN is an unknown quantity at this point
Sorry Bubble, but what is the password for RAR file ?
Reply With Quote
  #8  
Old 04-27-2005, 10:16
omidgl omidgl is offline
Senior Member
 
Join Date: Jul 2004
Posts: 75
Thanks: 5
Thanked 2 Times in 1 Post
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
omidgl is an unknown quantity at this point
Bubble
You've forgot the (PEE197.rar)password I think....

Regards
O M I D
Reply With Quote
  #9  
Old 04-27-2005, 12:51
bukkake's Avatar
bukkake bukkake is offline
VIP
 
Join Date: Aug 2004
Location: /usr/home
Posts: 118
Thanks: 0
Thanked 1 Time in 1 Post
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
bukkake is an unknown quantity at this point
You might wanna try this, I included a keygen in case you wanna register it with your name.
Attached Files
File Type: rar PEX+ResT+Keygen.rar‎ (25.4 KB, 82 views)
Reply With Quote
  #10  
Old 04-28-2005, 01:24
Aka
Guest
 
Posts: n/a
Password of Bubble is "exetools" without quote

aka
Reply With Quote
  #11  
Old 05-02-2005, 12:24
TheDutchJewel's Avatar
TheDutchJewel TheDutchJewel is offline
VIP
 
Join Date: Aug 2002
Posts: 258
Thanks: 5
Thanked 68 Times in 38 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
TheDutchJewel is an unknown quantity at this point
Thanks for your keygen bukkake, but the included TSRh's generic patch doesn't remove expiration.
BetaMaster's generic patch works fine.
__________________
thedutchjewel.x2.to

Last edited by TheDutchJewel; 05-02-2005 at 12:27.
Reply With Quote
  #12  
Old 05-03-2005, 01:13
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 532
Thanks: 0
Thanked 0 Times in 0 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
MaRKuS-DJM is an unknown quantity at this point
hehe, it isn't very hard target, should be not hard to crack it yourself. the only hint you need is that registration-file is pexdata.rdat
Reply With Quote
  #13  
Old 05-04-2005, 13:20
bukkake's Avatar
bukkake bukkake is offline
VIP
 
Join Date: Aug 2004
Location: /usr/home
Posts: 118
Thanks: 0
Thanked 1 Time in 1 Post
Groans: 0
Groaned at 0 Times in 0 Posts
Reputation: 0
bukkake is an unknown quantity at this point
Quote:
Originally Posted by TheDutchJewel
Thanks for your keygen bukkake, but the included TSRh's generic patch doesn't remove expiration.
BetaMaster's generic patch works fine.
With BetaMaster's patch you will get errors when you open a file.

04.05.2005 01:15:27 : Internal Error! (Step: Examining Imports)
04.05.2005 01:15:27 : Internal Error! (Step: Examining Resources)
04.05.2005 01:15:27 : Errors detected! Opening file in SAFE MODE...
04.05.2005 01:15:27 : Done.
Reply With Quote
  #14  
Old 04-27-2005, 12:33
Bubble
Guest
 
Posts: n/a
I'm sorry, the password is: exetools

I wanted to edit it right after I made my post but I had to wait several hours before my post was approved.
Reply With Quote
  #15  
Old 05-06-2005, 23:30
FKMA
Guest
 
Posts: n/a
Try this patched exe for v.1.97 size 2636894 bytes.
it's seems to be work, but i don't check it full and deep.
(it's not my crack, so don't kick me
Attached Files
File Type: rar pexplorer.rar‎ (1.39 MB, 36 views)

Last edited by FKMA; 05-06-2005 at 23:34.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
EXE Explorer ahmadmansoor Software Release 0 11-15-2007 00:41
PE Explorer 1.98 R3 mohsen3800 Software Release 20 11-04-2006 11:03
PE Explorer 1.95 byvs Software Release 20 08-25-2004 22:49
PE Explorer 1.91 feisu Software Release 22 02-19-2003 01:49


All times are GMT +8. The time now is 01:45.


ËÕICP±¸05004977ºÅ
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX