Hello all ,
I want to inject some code in an application (compilled with Borland delphi) and while injecting some code and saving to an executable it displays a messagebox, it says "unaable to locate data in executable file", for that reason I add some 100 bytes of data using hex editor and I changed the virtual size of the code section by 100 againg it also repeats the same MessageBox while saving to an exectable file..............
all help will be appreciated.

you can have a section with 0 long and all virtual example 10000 long, and when you want save in the executable, is not posible is all virtual.

This is the extreme but is the same sections have a RAW size and virtual size, if the virtual size is larger than raw size, will be parts of this section not posible to write (dont existe in executable)

look this section in ultraedit and you can look where the executable end, and you can add the missed bytes in ultraedit for make equeal raw and virtual, in this case you can write without problems.

sorry my english is bad maybe is very confuse.

try playing with an exe without importance, add with peeditor a new section this have initially 0 and 0 (virtuaal and raw size) if you change the virtual size to 1000 by example and increase the image size in 1000, the exe continue working and the section is created but only exist virtually this 1000 bytes are not addedd to the exe in the HD.
If you try copy to executable olly show the error message (cannot store the bytes)
Go to ultraedit, look the end of the section and add 1000 bytes.

Now the exe is more big (have 1000 bytes more) and in this section when you go to COPY TO EXECUTABLE you can write without problems)

Sorry for the confusing english

Ricardo Narvaja

Thank you Ricardo
I'll try this today and write you again the result.

i hope you understand any word of my bad english.

Ricardo

Your English really isn't that bad Ricardo, I always understand you.

~BoB~

Ricardo This doesn't work for me .. what to do next.

explain what do yo make and i tell you what´s is your error.

maybe you don´t understand my bad english but is not work or not work, is the real, olly cannot write out of the raw data, but is a delicate theme and is needed not to make the minimum error.
read this tuts

http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS %20NUMERADAS/253-IMPORT%20TABLES%20A%20MANO%20(parte%201).rar
("http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS%20NUMERADAS/253-IMPORT%20TABLES%20A%20MANO%20(parte%201).rar
")

http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS %20NUMERADAS/254-IMPORT%20TABLES%20A%20MANO%20(parte%202).rar
("http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS%20NUMERADAS/254-IMPORT%20TABLES%20A%20MANO%20(parte%202).rar
")

http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS %20NUMERADAS/255-IMPORT%20TABLES%20A%20MANO%20(parte%203).rar
("http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS%20NUMERADAS/255-IMPORT%20TABLES%20A%20MANO%20(parte%203).rar
")

http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS %20NUMERADAS/256-IMPORT%20TABLES%20A%20MANO%20(parte%204).rar
("http://www.ricnar456.dyndns.org/CRACKING/NUEVO%20CURSO/TEORIAS/TEORIAS%20NUMERADAS/256-IMPORT%20TABLES%20A%20MANO%20(parte%204).rar
")

this are tuts for repair IMPORT TABLES by hand (without import reconstructor) but i add a section by nand with peeditor and when i go to write the inject in executable OLLY tell me UNABLE TO WRITE DATA IN EXECUTABLE FILE, and is repared in the tut and is possible write.

And read all tut if you can i think is veru useful hehe.

Ricardo Barvaja
Ricardo

Ricardo,thanks a lot for your reply. I've found the english version of above mentioned tutorials,they are very cool...
arjuns