Its not that hard to do, you only have to do the following steps.
Make a backup of newsleecher.exe just to be sure :).
1. Open newsleecher.exe with your favorite hexeditor (ie. Hex Workshop).
2. Search for Text String " [RnE]" or Search for Hex Values "20 5B 52 6E 45 5D"
The hex values represent the same string: http://www.asciitable.com/
20 = space
5B = [
52 = R
6E = n
45 = E
5D = ]
3. Change the 07 value before this " [RnE]\" into 01
The 07 represents the length of the string
" [RnE]\" -> length of 7
"\" -> length of 1
"... FF FF 07 00 00 00 ..." becomes "... FF FF 01 00 00 00 ..."
4. Remove "... 20 5B 52 6E 45 5D ...", so whats left is "... 00 00 5C 00 ..."
The filesize of newsleecher must stay the same, so in removing those 6 values
you would have to add some padding using 6 NOPS, http://en.wikipedia.org/wiki/Nop
90 = NOP
5. Add those NOPS after "5C 00" -> "5C 00 90 90 90 90 90 90"
"... 5C 00 55 8B ..." becomes ... 5C 00 90 90 90 90 90 90 55 8B ..."
6. Save and you're done. Newsleecher RnE will not add the [RnE] tag anymore.
No comments:
Post a Comment