Programming and Coding
Programming and coding tips, help and solutions...
1,886 topics in this forum
-
hooking NtQueryInformationProcess
by snoopy- 8 replies
- 9.3k views
Hey guys, Small question, I've read the anti-debug reference from Peter Ferrie which goes into detail about tons of anti-debug tricks. Now what I am facing is the following. I am searching for a good way to hook NtQueryInformationProcess. Atm: ;------------------------------------------------------- ;Original instruction 6 bytes long: ;ntdll!NtQueryInformationProcess: ;774efa78 b816000000 mov eax,16h ;774efa7d 33c9 xor ecx,ecx ;------------------------------------------------------- NtQueryInformationProcessHook: mov eax,16h xor ecx,ecx pushfd cmp B[esp+0Ch],07h ;ProcesDebugPort 0x7 jne >CheckProcesDebugFlags mov B[esp+0Ch],00h CheckProcesDebugFlags: cmp B[es…
-
- 11 replies
- 9.7k views
hi programmer Delphi and C + + i need help converting from C + + to Pascal, because I am not free to call functions in C + + Builder are too sensitive. I hope you would help me. thx b4 Code /* SunVox engine is distributed under the following BSD-style license: Copyright © 2002 - 2010, Alex Zolotov <nightradio@gmail.com> All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduc…
-
mkfpack unpacker
by bigboss-62- 4 replies
- 15.4k views
Yohoo hord of fans... I'm proud to bring you my mkfpack unpacker. I haven' seen dedicated unpacker for this one, only genetic unpackers that supports it. Nothing special to say, except that unpacked file may contains an extra section containing ICON, GROUP_ICON, VERSION and MANIFEST. I have also included unpacker source code and packer source code in masm for those who are interested... See you soon ... Laurent aka BIGBOSS from COPs mkfpack.zip CPS!UnMkfPack.zip
-
Coding a packer stub in C++
by rendari- 11 replies
- 19.3k views
Hello all, While I've created packers for Windows before, they've all been in assembler. Right now I'm thinking of how to code a packer stub for windows in C++, and am stuck. Has anyone done this before and have any tips? Have any articles been written about this? I have a couple of ideas on how to do this, but they're all really nasty. One involves building the stub as a DLL, and appending it to the exe as a new section. Set Import Table in PE header to point to the import table of the appended DLL. Also you will need to manually fix all the relocations in the DLLs code section. This might work, but I imagine there would be nasty problems. Option 2 is to have an assemble…
-
MASM - Already patched-check (SnR function)
by DeadAndGone- 15 replies
- 6.2k views
removed
-
AHX Player Library
by Ufo-Pu55y- 6 replies
- 8.5k views
Hi, here's another lib, where I've kinda simplified the interface and build a static lib of a well known player code. Static lib and some example code in c and asm: PlayAhx.7z All credits for the library to Bartman/Abyss cheers
-
- 5 replies
- 4.6k views
I have an idea for an app, but ultimately I would like to make it possible for people to add functionality to it by means of plugins. It would be like Olly in that respect, except not quite that ambitious. What I would like is for people to be able to add this functionality non-language specific, ie. Iif someone wants to use Delphi or .NET, but I want to program the skeleton in C++, that should be allowed. I have done a lot of thinking about this but I wanted to get another's optinion on the best way to structure the framework before I took the plunge and started coding. I would imagine that provding an API is probably the best bet, but I wanted to make sure I didn't miss…
-
- 3 replies
- 4.2k views
movzx ecx,byte ptr [ebp+8] mov eax,055555556h imul ecx I can understand what those instructions are doing. For instance if ecx takes the letter 'x', the registers would contain the following: EAX: 0x50 ECX: 0x78 EDX: 0x28 Because 55555556 x 78 = 28000050, the high part goes to EAX and the low part goes to EDX. What I cant understand is how do I replicate this using C or C++, I tried to make a function that multiplies some hex number with 55555556 and keep the high/low byte on another variable. But RE that program doesn't produces the same results as those assembly instructions. Can anyone explain me how to translate those instructions into some HLL? Thank in adva…
-
- 5 replies
- 5.9k views
Anyone knows how BoxedApp does their packing of .NET PE into PE32 executables? I tried creating process from a PE32 stub exe and then mapping .NET PE into suspended process but it doesn't work - gives ".NET runtime not found error". It works only when the referenced stub is a .NET PE itself. />http://www.security.org.sg/code/loadexe.html My objective is to hide the existence of a .NET PE exe within a PE32 exe and yet able to run and load the Common runtime langauge (.net environment). Thanks for any advice.
-
Decrypting issue
by Sina- 2 replies
- 12.8k views
Hello, I'm goin to write a decoder for a unknown encryption but i have .SO(loaders) that used for that... as far as i know docoders uses the a lib(eg.: ioncube_loader_win_5.2.dll) and as i said i have libs ".SO" anyone could help me???
-
Vertical Scrolling Text help [Delphi]
by data_sniper- 2 replies
- 5.5k views
I want just to know how i can move text on a window like Text in the end of movies Its Scrolling Text but not Horizental .. i want to Create a Scrolling Text Vertical Tnx 4 helping Me
-
- 2 replies
- 4k views
Compare these tow messageboxs: MessageBox(0, 0, 0, 0); and MessageBox(0, 0, "", 0); The captions of them are different. What's the reason?
-
- 1 reply
- 4.3k views
Hello All mates, I created this noob example today, to show you the way to use RGN data and bitmap to make Non-Rectangular Dialog in Delphi API. Not enough time to make a full tutorial about it, so just download source code and see :Big Grin: and forgive me about any inconveniences. Link download: (Full source code + Sample Binary) by this link or Attached file below: Enjoy programming and best regards, Levis Region_DIalog_Delphi_API_Levis_REPT.7z
-
Bypass Skype API access control?
by Le Freak- 0 replies
- 6.4k views
Good day, I'm trying to automate some stuff using Skype and it's API (Skype4COM.dll). Everything is fine, however, when you access Skype COM for the first time, then it spits out a dialog like this: So you need to click some dialogs in order to confirm your application to use Skype. So I'm scratching my head, how to bypass this ugly dialog. Seems trivial, but I'm completelly stuck at the moment. I did small investigation with ProcMon - Skype stores confirmed plugin data in C:\Documents and Settings\Username\Application Data\Skype\Skypename\config.xml , however its SHA256 encrypted and unique for each plugin and its location, so, no way to copy and paste the configurat…
-
Disassembling ELF file format
by sherl0ck- 3 replies
- 6.9k views
I need to design a simulator for a SPARC based customized processor. The simulator has to be able to accept a SPARC-ELF binary as its input. Does anyone have any suggestion how to extract the RAW machine code from the ELF file so that I can disassemble it programmatically & simulate the instruction?
-
The -OK- Button (Debug/Trace) 1 2
by TBBW- 40 replies
- 23.9k views
Hi all, Story; At a certain stage during as setup (setup.exe) a window is displayed. It says Insert CD2. options; Ok, Cancel I go for the Ok option. Using Spy ++ I see the following; IRP_MJ_CREATE IRP_MJ_QUERY_INFORMATION IRP_MJ_QUERY_VOLUME_INFORMATION IRP_MJ_CLEANUP IRP_MJ_CLOSE so it does a check if cd2 is inserted. Using Olly debug; I see in the windows page Handle 002a0503 Parent 0015056E ID 00000001 Thread Main cls proc 752358F1 Is it possible to put a breakpoint on the ok button, using Olly or IDA? pressing the OK button executes a piece of code, is this easily found? I think I need to manipulate the information struct, telling the cd2 has been inserted. regards, g…
-
ST-Sound Library (YM file player)
by Ufo-Pu55y- 1 reply
- 6.7k views
Hi, well, the lib itself isn't new, but I haven't seen a clean static lib yet, ready to get used in asm. I've added some code from the SmallYmPlayer into the StSoundLibrary itself, so somebody doesn't have to worry about setting up a sound server like the SmallYmPlayer does. Lib (dynamic + static) with example code: PlayYm.7z All credits for the library to Leonard ofc: http://leonard.oxg.free.fr/ cheers
-
For visual studio users !
by Kurapica- 7 replies
- 6.1k views
Codekana is a Visual Studio add-in that helps you understand the code you're working on much faster. Colored outlines and highlights to show control-flow, function and class names, search results and unmatched delimiters It's FREE ... />http://www.codekana.com/
-
- 3 replies
- 7.9k views
Being a beginner, I wasn't aware that you could even inline ASM into a c++ program until I checked out this keygen challenge and saw the keygen code written by Reaction: http://forum.tuts4yo...-1/page__st__20 I copied the asm portion of Reaction's code into Visual C++ and it compiled and ran fine. However, I'm trying to use the same code in Xcode on a Macbook Pro running OS X 10.6.8, and I'm getting some errors. I don't know if it's differences in syntax or maybe I need to define some things. I'm attaching a screenshot of the errors with the code. Any help is appreciated!
-
Vertical Text Scroller Lib
by LulzCoder- 7 replies
- 6.8k views
Do anyone have vertical text scrolling library ? As diabloo's text scroller is horizontal one, I need a vertical one. Specially flicker free. Any idea, source ! HR, LulzCoder
-
How to hook recv function
by MarcosL- 1 reply
- 20.2k views
i m trying catch buffer of de recv function, but i not have success. I used C/C++ Code : #pragma comment(lib, "detoured.lib") #pragma comment(lib, "detours.lib") #pragma comment(lib, "Ws2_32.lib") #undef UNICODE #include <cstdio> #include <Winsock2.h> #include <ws2tcpip.h> #include <windows.h> #include "detours.h" //*IMPORTANT: Look at path if compiler error //Prototypes int (WINAPI *pSend)(SOCKET s, const char* buf, int len, int flags) = send; int WINAPI MySend(SOCKET s, const char* buf, int len, int flags); int (WINAPI *pRecv)(SOCKET s, char* buf, int len, int flags) = recv; int WINAPI MyRecv(SOCKET s, char* buf, int len, int flags); //Log files…
-
Vertical text Scrolling
by Dragon Warrior- 10 replies
- 6.8k views
Hello Guys, I was looking for a vertical text scroll engine or lib or simple sample code like u see in the about box of keygen or nfo viewer. I found diablo2oo2's scroll text lib, but it works for text horizontally. I tried downloaded some sample codes of keygen, but they include all extra things and the code is too complex to look at to figure out just how it making the text scroll vertical moving bottom-to-top n top-to-button. Can any one just put a small easy to understand sample code or hints without using any bitmap or effects. Juts simply a dialog box n text scrolling.. Thanks in advance...
-
- 22 replies
- 38.2k views
Hi guys, I am coding a new project in assembly (using MASM). I need to generate a random number each time that exe will run. To be more clear i need to generate random numbers between 0 to 9. I have tried crt_rand , but it gives me 1 every time I run the exe. Do anyone have any idea or source/demo on how to generate random numbers between 0 to 9 please tell me. And if the implementation of random function will be simple, it will be more useful. Thanks Blue Indian
-
Any static lib for playing mp3 from resource?
by alaphate- 4 replies
- 4.3k views
Which static lib could play mp3 from resource WITHOUT extracting the mp3 file to hard disk? C++ is prefered. Thank you buddies.
-
[masm] - program won't run on Win7
by DeadAndGone- 12 replies
- 6.7k views
hi all a friend of me and i got a problem. we found a nice firework-effect for asm32. but when trying to run the code in Windows 7 it crashes. Maybe someone can help us to get a working firework-effect for winxp & win7 ? pm me if you would take a look at the source
