Darg

Problem with Replace file

8 posts in this topic

Hello, Sorry for my poor English

I have one problem with replace Logonui.exe (logonui.ex_ edited) on \I386 Folder

I first export original logonui.exe from logonui.ex_ with winrar, next edit it with ResHacker and replace my custom bitmap to it and save.

After for test replace it to my current system and test it (version of both those are 6.0.2900.5512)

it run can work correctly and successfully.

After I compressed the new lononui.exe with MakeCab.exe:

makecab .\logonui.exe .\logonui.ex_ /v3

and replace new logonui.ex_ to Image Setup CD with UltraISO and save new image.

but on setup text Mode of winXP ,Setup Have error:

"The File Logonui.exe was not copied correctly"

I don’t understand where my error !?

I read the description for this work (a topic on this forum) that say must compressed that file with "Compression Bin" program. And I download it and again compress with this profram:

Edited Logonui .exe size: 3,102,720 bytes

Compressed size (with my way): 1,763,004 bytes

Compressed size (with Compression Bin): 1,431,824 bytes !!!

And again replace new logonui.ex_ (:with Compression Bin) to image setup cd but Setup again have this error:

"The File Logonui.exe was not copied correctly"

Please help me, I don’t understand where my error !?

0

Share this post


Link to post
Share on other sites

you have too "modifype" the file.

this makes sure setup doesnt detect the change in the file.

google for modifype, sure you get a hit.

Damian666

0

Share this post


Link to post
Share on other sites

ResHacker normaly is correct the pe-sum automatical, only if your new file over 10MB.

But the 10MB is a windows limitation, if your file bigger then 10MB you have to UPX it first.

A member from ouer german nlite forum has written a tool to read out the PE sum an to correct it.

This tool is german only but mybe its helpfull for you.

http://www.german-nlite.de/index.php?s=&am...st&p=122189

This tool needs Dot.Net2, the name is "PEChecksumBearbeiter"

This tool works with drag&drop and the language should not be necessary for use.

0

Share this post


Link to post
Share on other sites

no, i am sorry, but that is not the case man.

reshacker cant recreate that checksum.

only modifype is capable of cheating around the setup file checks.

trust me, its all over the forum here... search for modifype, you wil see...

Damian666

0

Share this post


Link to post
Share on other sites

All the time with SP2 i never looked for the PE sum, and never got problems.

With SP3 it got some problems with my modify files and i looked for the PE sum.

EVRY file i modify with ResHacker got the right PE sum!

(only one file up to 10MB got a wrong PE sum!)

Thats the reason why §engelmarkus" has wroten the tool "PEChecksumBearbeiter" to check the PE sum.

0

Share this post


Link to post
Share on other sites

tanks all

i fix it with your help

the main word for search was "modifype"

i first edited file send to modifype and this changes my edited file. befor this i can see bitmap pictures with reshacker an now reshacker dont show those pictures (it first that i extract logonui.exe form main logonui.ex_).

and correct, I use than SP3 Setup and now dont problem with replace other files (for example ntoskrnl.exe)

0

Share this post


Link to post
Share on other sites

yep, as i said, modifype is the way :D

good luck with your modifications man :D

Damian666

0

Share this post


Link to post
Share on other sites

copy the orginal logonui.ex_ into local drive..xtract it by "expand logonui.ex_ -r" or winrar.

THEN EDIT VIA RESOURCE TUNNER.

tHEn COMPRESS IT BY TYPING "MAKECAB LOGONUI.EXE" DONE NOW JUST PUT IT TO I386 FOLDER

Edited by johny119
0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.