Programming and Coding

API Hooks Detours in MASM32

November 25, 2009 by clip

12 replies
8.9k views

Hi, I'm working on a socket debugger, I know there are plenty of this around, but I want to learn how to make my own in MASM32. Initially I'm trying to hook the "send" function from wsock32.dll then open firefox. I would like to replace the information being sent by firefox with "Gotcha". I used jaghook for this. So far it's not working. Does anyone have a clue why? replace.asm .486 .model flat, stdcall option casemap: noneinclude \masm32\include\windows.inc include \masm32\include\kernel32.inc include \masm32\include\user32.inc include \masm32\include\wsock32.incincludelib \masm32\lib\kernel32.lib includelib \masm32\lib\user32.lib includelib \masm32\lib\wsock32.libincl…

Last reply by estelle, April 2, 2011

How i can get commands of a debugged process ?

April 1, 2011 by mrousse83

10 replies
4.4k views

Hello, I search how i can get each commands of a debugged process in OllyDbg. I think i need to use this function : ulong Readcommand(ulong ip,char *cmd); My program entry point : 004C5C74 > $ 55 PUSH EBP var Commande : string;if Readcommand($004C5C74, PAnsiChar(Commande)) > 0 then // success else // error But when u try it, it's not working Readcommand return all time 0 ! I need to have : Commande := 'PUSH EBP' Can you help me ? Thanks, Mathieu

Last reply by mrousse83, April 1, 2011

Make ollydbg.lib with ollydbg.def in Visual C++ 2010 Express ?

April 1, 2011 by mrousse83

2 replies
6.3k views

Hello, I need your help for make ollydbg.lib with the file ollydbg.def in Microsoft Visual C++ 2010 Express Edition. Thanks, Mathieu

Last reply by mrousse83, April 1, 2011

Get Api name from address

March 28, 2011 by ragdog

3 replies
16k views

Hi I coding a function to Get Api name from address. Now I am confused in my Iat have i this Address 74A44619 00403000 . 19467574 DD comctl32.InitCommonControls Ok i enum all process modules und parsing all found dll for this address for get the api name I use LoadLibrary and GetProcAddress with LoadLibrary and GetProcAddress get i this address 75AB1739 to the APi InitCommonControls Why? I use Win7 Thanks,

Last reply by ghandi, March 29, 2011

[Delphi] Reload Registry Settings...

March 26, 2011 by mAStEr pAIn

3 replies
8.7k views

Hi Guys... Hope someone can help me out with a problem in delphi programming. First of all i'm coding in delphi since around 3 month. I want to describe my prob a little bit more... I'm using windows 7 x64. In win7 and also in win vista you can add program links to the task bar. But you can only do this when the string "IsShortcut" is written in the windows registry. When this string exists you have on your desktop some "freeky" arrows on your links. So i made a little app to write and delete this string to the registry. For now so good. But you only see the changes take effect when you log off and on again. Or you do a complete system restart. And theres my problem. I kn…

Last reply by mAStEr pAIn, March 26, 2011

Help me use SetWindowsHookEx.

March 24, 2011 by Vic

2 replies
6.6k views

Hi, I need you help me. I want to use SetWindowsHookEx to hook a function exported from a dll to a run a process but it did not work. Detail: I'm have 3 files: Audition.exe, Hooker.exe & DllHook.dll, I'm using Hooker.exe to load that dll & execute function SetHook (exported in dll for Hooker.exe use it). SetHook function in dll will excute to use SetWindowsHookEx to hook a other function in dll into Audition.exe. If hook success it'll show a nag is the PID of Audition.exe process is running. But it's hook isn't success. I want to you help me. This is code in DllHook: Project: This is project of it, i uploaded in attachment file. I hope yous hlp me right now. Tkz…

Last reply by Vic, March 25, 2011

Win32 Assembly Cheat Sheet

March 24, 2011 by N1ghtm4r3

0 replies
7k views

Handy thing.

Last reply by N1ghtm4r3, March 24, 2011

AVR Assembly USART problem

March 22, 2011 by quosego

6 replies
6.4k views

Hey all, Something else than those C++ and x86 asm programming stuff topics. Let's hope someone knows soemthing. I've been attempting to code an interrupt driven usart connection between an AVR chip board and the PC. (the PC is sending the data) However it seems that when an byte is recieved it keeps giving interrupts even when the buffer is read. (which should stop that according to the datasheet) Interrupt code which is properly triggered when recieving a byte but just keeps interrruptingand spamming my terminal: Serial_Recieve: ;store incoming bytes in r24,UDR out UDR, r24 reti Am I missing something here. Afaik I am initing the serial connecti…

Last reply by quosego, March 24, 2011

wired visual studio problem

March 19, 2011 by deepzero

6 replies
5.2k views

right, so yesterday night i had a native vsc++ 2008 project display a dialogbox using the DialogBox(...) functon. worked perfectly fine. i then went to bed, and when i got up this morning, the exact same DialogBox call would just return -1 and fail. I then did some further testing: 1) Creating a dialogbox with a list view on it always fails 2) creating a dialogbox with NO list view on it always succeeds. sometimes the dialog will get display correctly, sometimes the form-background is missing and some dialog items are floating around freely.it always takes up 100% cpu power. 3) creating a new,clean project with a dialog but no list view, it works in the beginning, but aft…

Last reply by deepzero, March 22, 2011

[C++] char Error

March 22, 2011 by argv_arteam

2 replies
6.6k views

Hello. I have no idea why this code won't compile. I get: error C2440: 'return' : cannot convert from 'char *' to 'const char' error. I compiled it before. Can anyone take a look at the solution and try to fix the problem? It is only few KB is size and project is already created. Thanks in advance! Project.rar

Last reply by argv_arteam, March 22, 2011

[.NET] GacHelper

March 21, 2011 by sirp

0 replies
5.5k views

voyce / gachelper A quick project to wrap the unmanaged C++ APIs in the .NET GAC API known as Fusion internally), in a way that they can be called easily from managed code (C#, F# etc). voyce gachelper Example where it's used using-mono-cecil-and-f-to-get-assembly-dependencies/

Last reply by sirp, March 21, 2011

Visual Studio Tricks (ROX!)

August 25, 2010 by sirp

3 replies
7.8k views

tips and tricks and tricks and tips ..just wonderful />http://scottcate.com/Tricks/

Last reply by Malaya2100, March 20, 2011

identifiying/keeping appart multiple instances of dialog boxes

March 18, 2011 by deepzero

1 reply
3.4k views

hi, so i have been messing with native GUI programming in msvs2008 recently and lots and lots of problems & questions arose... Most of them were exterminated by a quick google search. This one is a little persistent, though: I have a class, myclass. The user can create multiple instances of that class. Every class instance has its own instance of a dialog box, which can be displayed at the same time. How can i now link a class instance to a dialog box? ie, if the dialog boxes CALLBACK routine is called, how can i know which class instances dialog box send the message? deep0

Last reply by Zool@nder, March 19, 2011

[Help] About the patch and overwrite the file in VB.NET 2008

March 17, 2011 by inloves

0 replies
3.2k views

I have this problem need help, I created a button in VB.Net, then I make the following code VB.NET 2008: Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click FileOpen(1, My.Application.Info.DirectoryPath & "\file.exe", OpenMode.Binary) FilePut(1, &H5003C0, &H7600) FileClose(1)This code will make the process as follows: First it will download a file (file.exe) to specify its path with the old file.exe will then open this file and overwrite. But here it just file.exe changed from old to new file.exe a new file, but does not override Please help me about this code in VB.NET 2008 Here's…

Last reply by inloves, March 17, 2011

x86 hash optimization toolkit (MASM)

March 15, 2011 by CodeExplorer

2 replies
5.8k views

x86 hash optimization toolkit (MASM) />http://www.paco.net/~tol/hash/x86hotk.html Looks great!

Last reply by CodeExplorer, March 16, 2011

increasing pointers

March 15, 2011 by deepzero

2 replies
4.7k views

hi all, this little problem is killing me: char data[256]; mystruct* mystructptr; //copy some stuff into the data buffer int the buffer "data",there are 12 junk bytes, but then there is a mystruct struct. i need to point to that struct... way #1: mystructptr = (mystruct*)(data+12); this works just fine, mystructptr points to the address of "data" + 12. this, however, doesnt work: mystructptr = (mystructptr*)data; mystructptr = (mystruct*)(mystructptr + 12); or mystructptr = (mystructptr + 12) or mystructptr += 12; the data buffer gets increased by ~0x400 bytes, not 12... i really cant see why #2 wouldnt work.

Last reply by deepzero, March 15, 2011

VB.NET Trainer Template

March 1, 2011 by Caliber.

5 replies
9.5k views

File Name: VB.NET Trainer Template File Submitter: Caliber. File Submitted: 01 Mar 2011 File Category: Source Code GencliQ Cracking Team Trainer Template & Source Code Compiler : VB.NET Author : zugo & Caliber Click here to download this file

Last reply by nickpalingcool, March 15, 2011

Writing a Simply debugger

March 13, 2011 by ragdog

5 replies
10.4k views

Hi I Write a simply debugger in masm32 now have i a problem why crash it the Target If set a Bp by other Address Test Target if "crackme.upx.exe" from Apox Set i a BP by 004082AF works it fine But set i a bp by 004082A8 or other address if my Bp not reached and the target crash it ;004082A6 .^\EB E1 JMP SHORT 00408289 ;004082A8 > FF96 54850000 CALL DWORD PTR DS:[ESI+8554] ;004082AE > 61 POPAD ;004082AF .- E9 0C90FFFF JMP 004012C0 ;004082B4 00 DB 00 mov eax,004082A8h mov [bpAddress],eax invoke SetBP,eax ;Set a Int3 Breakpoint ;from winhex if INT3 written ? ;and Yes if written ;EBE1(CC)965485 .while TRUE invoke WaitForDebug…

Last reply by ghandi, March 14, 2011

Collection.of.Delphi.Examples.v2.7

March 12, 2011 by CodeExplorer

0 replies
3.5k views

Collection.of.Delphi.Examples.v2.7 by Cin TEAM />http://www.mediafire.com/?p0gzngq1q6hsgoa

Last reply by CodeExplorer, March 12, 2011

C# Keygen and Solution

November 17, 2010 by argv_arteam

5 replies
7.5k views

Hi. I wanted to ask a small favor if anyone has some spare time. I guess most of you could do it in 15min or so. I am working on a project but I don't want bla bla bla about that and I found myself in need of C# Keygen and also solution. While I may be one of best ARM Assembly guys around, C# is really not my thing. So, I was thinking something in these lines: 1. Make a "standard" C# keygen 2. Put a small "twist" in it (if possible). By that I mean a small obstacle. Anything you can think of. 3. Make a solution. 4. PM me the stuff. If anyone could do it I would be very grateful and if you need something from ARM world, just let me know and it is done. I hope you understoo…

Last reply by inyong, March 6, 2011

exe/dll

December 4, 2010 by deepzero

7 replies
4.7k views

Hi, I´m trying to create an .exe file, which can be used as a dll file at the same time. Take, for example, this piece of code: #include <Windows.h>BOOL APIENTRY DllMain( HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved ) { MessageBoxA(0,"dll","dll",0); } int main() { MessageBoxA(0,"exe","exe",0); } Just executing it like any other exe will run int main(). Now, the idea is that when this .exe file is loaded via LoadLibrary DllMain is called as if it was a dll. Is this actually possible? Or is there any other way the exe gets notified when it is LoadLibrary loaded? deep

Last reply by deepzero, March 5, 2011

Compressing floats in a tiny format

March 3, 2011 by hmi222

6 replies
4.3k views

Hi. I want to store floats in a tiny format. As small as possible eg to 8bit or 16bit. Anyone an idea how that could be done? I need to have a precicion of 3 digits behind the comma. Thanx in advance

Last reply by Ufo-Pu55y, March 4, 2011

VB.NET 2008 Simple Debugger CORE

March 4, 2011 by Kurapica

0 replies
3.7k views

This is an old Project to create a debugger core using VB.NET 2008 ofc it's not the best choice to code a debugger not because it's weak ! but because VB.NET doesn't support unsafe code like C# so you will have to add extra lines of code to pass structures between managed and native code. this Project requires some knowledge of Marshaling techniques, i.e passing data structures between native and managed code. I hope someone will find it useful all comments are welcome ofc P.S : It won't work on XP because I used a new API which is only supported by Vista and later OS, this API is "GetFinalPathNameByHandleW" ofc it can be wrapped using some other techniques to …

Last reply by Kurapica, March 4, 2011

Methods Parser Source Code

March 3, 2011 by Kurapica

2 replies
5.5k views

This is the full source of this little tool, I hope someone will find it useful as you can see It was a 2 day tool so don't expect too much but I commented the code well The Project is coded with Visual studio 2008 using C# Any comments are welcome, you can use this code as you like but It will be nice if you give some credit to Black Storm TEAM... />http://portal.b-at-s.net/download.php?view.479

Last reply by Kurapica, March 3, 2011

Multi-Threaded Debugger-Injector *Delphi Source