Programming and Coding
Programming and coding tips, help and solutions...
1,890 topics in this forum
-
- 7 replies
- 12.4k views
Summary: Read 32- and 64-bit PE files (PE, PE+) for Windows, work similar with both formats Rebuild 32- and 64-bit PE files Work with directories and headers Convert addresses Read and write PE sections Read and write imports Read and write exports Read and write relocations Read and write resources Read and write TLS Read and write image config Read and write basic .NET information Read bound imports Read exception directory (PE+ only) Read debug directory and extended debug information Calculate entropy Change file alignment Change base address Work with DOS Stub and Rich overlay High-level resource reading: bitmaps, icons, cursors, version info, string and message tabl…
-
Looking for a light weight debugging engine API
by genuine_- 4 replies
- 4.3k views
Hey guys, Im looking to see if there is a light weight C/C++ debugging engine api for Windows out there? Something capable of handling BP's and such, nothing fancy, this is for a small PoC tool im working on and was wondering before i decided if i needed to just write a small debugging engine on my own. I am only aware of TitanEngine which has such an interface, but TitanEngine is abit much for this purpose. Thank you.
-
Hiding window state from itself
by brain- 1 reply
- 6.7k views
I'm running multiple instances of a gui application at once to dump a list each application maintains in form of a ListControl. I would like the windows to stay minimized but unfortunately they stop updating the ListControl then. I thought if the application doesn't know it's minimized it should keep behaving like it's not. After a bit of research i found that basically the only way to determine if a window is minimized is calling IsIconic or handle WM_SYSCOMMAND and remember till the window is restored. But the application does neither. Then i thought maybe the list is only updated internally (which is the only thing that matters, I don't have to see it) when WM_PAINT me…
-
Hexidecimal to Decimal
by zorke- 5 replies
- 6.9k views
Hi Recently i've started a project which requires displaying output as a decimal number in ASCII characters. I've done the Hex value - to - ascii char thing but conversion of the number ... say - 2012 from hex (which is 0x07dc) to a decimal number displayed on the screen (2012) is a bit more difficult. Example : eax == 07dc i want to display in a messagebox the decimal value of eax. how do i make it decimal? Thanks
-
hooking NtQueryInformationProcess
by snoopy- 8 replies
- 9.4k views
Hey guys, Small question, I've read the anti-debug reference from Peter Ferrie which goes into detail about tons of anti-debug tricks. Now what I am facing is the following. I am searching for a good way to hook NtQueryInformationProcess. Atm: ;------------------------------------------------------- ;Original instruction 6 bytes long: ;ntdll!NtQueryInformationProcess: ;774efa78 b816000000 mov eax,16h ;774efa7d 33c9 xor ecx,ecx ;------------------------------------------------------- NtQueryInformationProcessHook: mov eax,16h xor ecx,ecx pushfd cmp B[esp+0Ch],07h ;ProcesDebugPort 0x7 jne >CheckProcesDebugFlags mov B[esp+0Ch],00h CheckProcesDebugFlags: cmp B[es…
-
- 11 replies
- 9.9k views
hi programmer Delphi and C + + i need help converting from C + + to Pascal, because I am not free to call functions in C + + Builder are too sensitive. I hope you would help me. thx b4 Code /* SunVox engine is distributed under the following BSD-style license: Copyright © 2002 - 2010, Alex Zolotov <nightradio@gmail.com> All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduc…
-
mkfpack unpacker
by bigboss-62- 4 replies
- 15.5k views
Yohoo hord of fans... I'm proud to bring you my mkfpack unpacker. I haven' seen dedicated unpacker for this one, only genetic unpackers that supports it. Nothing special to say, except that unpacked file may contains an extra section containing ICON, GROUP_ICON, VERSION and MANIFEST. I have also included unpacker source code and packer source code in masm for those who are interested... See you soon ... Laurent aka BIGBOSS from COPs mkfpack.zip CPS!UnMkfPack.zip
-
Coding a packer stub in C++
by rendari- 11 replies
- 19.5k views
Hello all, While I've created packers for Windows before, they've all been in assembler. Right now I'm thinking of how to code a packer stub for windows in C++, and am stuck. Has anyone done this before and have any tips? Have any articles been written about this? I have a couple of ideas on how to do this, but they're all really nasty. One involves building the stub as a DLL, and appending it to the exe as a new section. Set Import Table in PE header to point to the import table of the appended DLL. Also you will need to manually fix all the relocations in the DLLs code section. This might work, but I imagine there would be nasty problems. Option 2 is to have an assemble…
-
MASM - Already patched-check (SnR function)
by DeadAndGone- 15 replies
- 6.3k views
removed
-
AHX Player Library
by Ufo-Pu55y- 6 replies
- 8.6k views
Hi, here's another lib, where I've kinda simplified the interface and build a static lib of a well known player code. Static lib and some example code in c and asm: PlayAhx.7z All credits for the library to Bartman/Abyss cheers
-
- 5 replies
- 4.7k views
I have an idea for an app, but ultimately I would like to make it possible for people to add functionality to it by means of plugins. It would be like Olly in that respect, except not quite that ambitious. What I would like is for people to be able to add this functionality non-language specific, ie. Iif someone wants to use Delphi or .NET, but I want to program the skeleton in C++, that should be allowed. I have done a lot of thinking about this but I wanted to get another's optinion on the best way to structure the framework before I took the plunge and started coding. I would imagine that provding an API is probably the best bet, but I wanted to make sure I didn't miss…
-
- 3 replies
- 4.3k views
movzx ecx,byte ptr [ebp+8] mov eax,055555556h imul ecx I can understand what those instructions are doing. For instance if ecx takes the letter 'x', the registers would contain the following: EAX: 0x50 ECX: 0x78 EDX: 0x28 Because 55555556 x 78 = 28000050, the high part goes to EAX and the low part goes to EDX. What I cant understand is how do I replicate this using C or C++, I tried to make a function that multiplies some hex number with 55555556 and keep the high/low byte on another variable. But RE that program doesn't produces the same results as those assembly instructions. Can anyone explain me how to translate those instructions into some HLL? Thank in adva…
-
- 5 replies
- 5.9k views
Anyone knows how BoxedApp does their packing of .NET PE into PE32 executables? I tried creating process from a PE32 stub exe and then mapping .NET PE into suspended process but it doesn't work - gives ".NET runtime not found error". It works only when the referenced stub is a .NET PE itself. />http://www.security.org.sg/code/loadexe.html My objective is to hide the existence of a .NET PE exe within a PE32 exe and yet able to run and load the Common runtime langauge (.net environment). Thanks for any advice.
-
Decrypting issue
by Sina- 2 replies
- 12.9k views
Hello, I'm goin to write a decoder for a unknown encryption but i have .SO(loaders) that used for that... as far as i know docoders uses the a lib(eg.: ioncube_loader_win_5.2.dll) and as i said i have libs ".SO" anyone could help me???
-
Vertical Scrolling Text help [Delphi]
by data_sniper- 2 replies
- 5.6k views
I want just to know how i can move text on a window like Text in the end of movies Its Scrolling Text but not Horizental .. i want to Create a Scrolling Text Vertical Tnx 4 helping Me
-
- 2 replies
- 4.1k views
Compare these tow messageboxs: MessageBox(0, 0, 0, 0); and MessageBox(0, 0, "", 0); The captions of them are different. What's the reason?
-
- 1 reply
- 4.4k views
Hello All mates, I created this noob example today, to show you the way to use RGN data and bitmap to make Non-Rectangular Dialog in Delphi API. Not enough time to make a full tutorial about it, so just download source code and see :Big Grin: and forgive me about any inconveniences. Link download: (Full source code + Sample Binary) by this link or Attached file below: Enjoy programming and best regards, Levis Region_DIalog_Delphi_API_Levis_REPT.7z
-
Bypass Skype API access control?
by Le Freak- 0 replies
- 6.5k views
Good day, I'm trying to automate some stuff using Skype and it's API (Skype4COM.dll). Everything is fine, however, when you access Skype COM for the first time, then it spits out a dialog like this: So you need to click some dialogs in order to confirm your application to use Skype. So I'm scratching my head, how to bypass this ugly dialog. Seems trivial, but I'm completelly stuck at the moment. I did small investigation with ProcMon - Skype stores confirmed plugin data in C:\Documents and Settings\Username\Application Data\Skype\Skypename\config.xml , however its SHA256 encrypted and unique for each plugin and its location, so, no way to copy and paste the configurat…
-
Disassembling ELF file format
by sherl0ck- 3 replies
- 7.1k views
I need to design a simulator for a SPARC based customized processor. The simulator has to be able to accept a SPARC-ELF binary as its input. Does anyone have any suggestion how to extract the RAW machine code from the ELF file so that I can disassemble it programmatically & simulate the instruction?
-
The -OK- Button (Debug/Trace) 1 2
by TBBW- 40 replies
- 24.2k views
Hi all, Story; At a certain stage during as setup (setup.exe) a window is displayed. It says Insert CD2. options; Ok, Cancel I go for the Ok option. Using Spy ++ I see the following; IRP_MJ_CREATE IRP_MJ_QUERY_INFORMATION IRP_MJ_QUERY_VOLUME_INFORMATION IRP_MJ_CLEANUP IRP_MJ_CLOSE so it does a check if cd2 is inserted. Using Olly debug; I see in the windows page Handle 002a0503 Parent 0015056E ID 00000001 Thread Main cls proc 752358F1 Is it possible to put a breakpoint on the ok button, using Olly or IDA? pressing the OK button executes a piece of code, is this easily found? I think I need to manipulate the information struct, telling the cd2 has been inserted. regards, g…
-
ST-Sound Library (YM file player)
by Ufo-Pu55y- 1 reply
- 6.8k views
Hi, well, the lib itself isn't new, but I haven't seen a clean static lib yet, ready to get used in asm. I've added some code from the SmallYmPlayer into the StSoundLibrary itself, so somebody doesn't have to worry about setting up a sound server like the SmallYmPlayer does. Lib (dynamic + static) with example code: PlayYm.7z All credits for the library to Leonard ofc: http://leonard.oxg.free.fr/ cheers
-
For visual studio users !
by Kurapica- 7 replies
- 6.3k views
Codekana is a Visual Studio add-in that helps you understand the code you're working on much faster. Colored outlines and highlights to show control-flow, function and class names, search results and unmatched delimiters It's FREE ... />http://www.codekana.com/
-
- 3 replies
- 8k views
Being a beginner, I wasn't aware that you could even inline ASM into a c++ program until I checked out this keygen challenge and saw the keygen code written by Reaction: http://forum.tuts4yo...-1/page__st__20 I copied the asm portion of Reaction's code into Visual C++ and it compiled and ran fine. However, I'm trying to use the same code in Xcode on a Macbook Pro running OS X 10.6.8, and I'm getting some errors. I don't know if it's differences in syntax or maybe I need to define some things. I'm attaching a screenshot of the errors with the code. Any help is appreciated!
-
Vertical Text Scroller Lib
by LulzCoder- 7 replies
- 6.9k views
Do anyone have vertical text scrolling library ? As diabloo's text scroller is horizontal one, I need a vertical one. Specially flicker free. Any idea, source ! HR, LulzCoder
-
How to hook recv function
by MarcosL- 1 reply
- 20.3k views
i m trying catch buffer of de recv function, but i not have success. I used C/C++ Code : #pragma comment(lib, "detoured.lib") #pragma comment(lib, "detours.lib") #pragma comment(lib, "Ws2_32.lib") #undef UNICODE #include <cstdio> #include <Winsock2.h> #include <ws2tcpip.h> #include <windows.h> #include "detours.h" //*IMPORTANT: Look at path if compiler error //Prototypes int (WINAPI *pSend)(SOCKET s, const char* buf, int len, int flags) = send; int WINAPI MySend(SOCKET s, const char* buf, int len, int flags); int (WINAPI *pRecv)(SOCKET s, char* buf, int len, int flags) = recv; int WINAPI MyRecv(SOCKET s, char* buf, int len, int flags); //Log files…
