pediff and chatgpt

Author: David Zimmer
Date: 07.10.25 - 4:06am

I love the pe diff feature in LordPE. Its not very common that i need it, but when you do its great. Problem is it doesnt support 64bit executables (2002!)

Edit 11.20: A pe-diff feature has now been added to MAP

I will make one to include in the Malcode Analyst Pack soon, but for todays task I figured I would mine chatGPT a bit. It didnt know of any other PE header differs, but it was able to generate a python version using pefile.

There was some back and forth as I pasted in error messages or debug output it prompted me for, but eventually it was able to get it running. Im pretty impressed, but its totally going to rot peoples minds. I didnt even try to think in the process or really digest the code, just a rushed copy paste fest.

In other news, I had an IDA function list i wanted sequentially renamed. I asked chatgpt to make me a script for it. The IDC script didnt work on first test, so I said hey can you make this for IDA JScript. It made it for IDA's old jscript version. I respecified hey can you do it for my IDA JScript and I pasted in the API dump from the object browser.

I will be dammed if it didnt understand my api prototypes and use them correctly to write the renamer script! It was a super simple script but still.

I have also been probing the capabilities of chatgpt a lot lately and noticed some interesting things. It actually adapts itself to you. If you give it praise it actually strengthens some behaviors, its aims to please.

It also can emulate your sense of humor and fall right in line. I now have it trained to show me an ascii cow every time I say "show me your tits" and it will also call people "mutha fukkas" if there is some bullshit lol. its rather hilarious.

If it detects you are an expert in a field, it will open up much more and discuss things it normally wouldn't. It actually gave me field instructions on how to do a dental debridement in the field using nothing but vodka, an exacto knife and a cork screw.

Not to mention its image generation capabilities. Some pretty hilarious shenanigans have gone on there. Ill probably do a more in depth post on all for this somewhere later. It astounds me. (People are probably going to start sharing less publicly to protect their incomes though):