Deformation of winrar self-extracting files

It is particularly emphasized that there is a risk of modification. Please back up your data before modification!

Note:

For WINRAR self-extracting files (hereinafter referred to as "self-extracting files"), I don't want to introduce them more here. If you are interested, you can search for relevant information by google or baidu, the following tutorial explains how to decompress the file.

Introduction:

One bottleneck of Self-extracting files is that after you compress the files and generate the so-called XXX self-extracting file, right-click the file, you can clearly find the option "open with winrar", such:

Experienced people, as long as they have noticed, basically all know to use this option to decompress the self-extracting file. Is there a way to solve the above bottleneck? The answer is yes. Now let me hear it!

Objectives:

Enable the "open with winrar" option to not be displayed during right-click.

Steps: 

　　Enable the "enable with winrar" option to not be displayed when right-clicking:

Required tools:Winhex and OllyDbg

First, let's use winhex to open our self-extracting file, and press the hotkey ctrl + f to search for "Rar! ", Such:

Here we will "Rar! "Changed to" Ray! ", Then remember the corresponding value. In the figure, the value above the modified value is" 52 61 79 ", for example:

Then, press ctrl + s to save our changes. Click "yes" in the pop-up dialog box!

Here, we have completed the first small part. Next we will use OllyDbg to open the self-extracting file we just modified and saved. After opening it, right-click anywhere and choose "Search"> "all constants, for example:

In the displayed dialog box, enter the first value we recorded in hexadecimal format-"52" and press enter, for example:

Double-click to search until the following content is found:

How is it? Are you familiar with "52 61 72" Where have we met? Go back and look at our 2nd images without modifying "Rar! "Is" Ray! "When, is this string of numbers" 52 61 72? After the change, the value is changed to "52 61 79". Here we should be able to guess what we have to do. Right, what we have to do below is to set "72" here ", change it to "79" and save it. Here I will omit the modified image. The modification method is to double-click the place to be modified, and then modify it. Then click assemble! When saving the file, you must select the area you just modified. It doesn't matter how much you select. You need to select it and then follow the steps!

Right-click and choose Save, and the name will be OK, for example:

At this point, our first goal is complete. Right-click the self-extracting file and choose whether the option "open with winrar" is not available. Do you believe me, for example:

----------------------------------------------------------------------------------

If the original article is reprinted, please note: Reprinted from365 laboratories