Programming and Coding

Includes DLL and GUI https://github.com/KurapicaBS/dotNET_Tracer

Hi everyone. I'm looking for a tiny library in C/C++ (or binding) that able to: - Evaluate simple x86/x64 assembly codes (execute codes from a string to get output). - Each asm instruction has callback or hook (at least memory access instruction, for several special purposes, E.g. using ReadProcessMemory to read memory from other process, etc). Maybe a little bit like a VM. MOV RAX,$INPUT ADD RAX,8 MOV RAX,[RAX] # eg. memory access instruction MOV $OUTPUT,RAX Hint me. Thanks.

hi all, this is a recompilation of 2009 setup I made... whats new @ rebuilt on INNO6 removed FPWPP.DLL (basically the main reason of recompilation is this, the 2009 setup, stuck on win10x64 machines due Frontpage DLL registration!!) optimize Extra Components by14mb to 686kb dn 16.3mb @ mir.cr/S4SZWQK6 or upload.ee/files/14138148/Microsoft.Visual_Basic_v6.0sp6.upd2022-whoknows.rar.html

Hello guys. How is going ? Can anyone help me with this ? I'm searching for a reason for this to happen. My application uses DirectInput, it uses GUID_MouseSys. Sometimes when the app crashes it go back to visual studio but the cursor is VERY laggy as all action with keyboard too. Alt + TAB delays at least 2 to 3 seconds... Anyone knows why this happen ? Or at least can help to try to investigate the problem ? Thanks! ---- Edit Strangely if start debugging session and keeps maintaining focus on VStudio everything stays normal. I think it's related to windows focus. But I can't really say it.. Any tips ?

Can't use a .lib from vc6 that has no source. Keep getting this error of "unresolved external" _set_new_handler. Already installed all CRT from VSTUDIO. Universal CRT. And so on. Tried to include this libs in the project, seems that none of them can solve the issue. https://docs.microsoft.com/en-us/cpp/c-runtime-library/crt-library-features?view=msvc-170 Severity Code Description Project File Line Suppression State Error LNK2001 unresolved external symbol "int (__cdecl*__cdecl _set_new_handler(int (__cdecl*)(unsigned int)))(unsigned int)" (?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z) MODULE LIB_LOCATION...(Exception.obj) I'm thinking in reverse it into code. It's not …

Hi there guys, I recently ripped an aboutbox from one of HAZE's keygens but unfortunately when i was going to compile and even inserted the externdef's both for __CIsin and __ftol2_sse : externdef c __CIsin:dword externdef c __ftol2_sse:dword ... i do get this error on compiling: bones.obj : error LNK2001: unresolved external symbol ___CIsin bones.obj : error LNK2001: unresolved external symbol ___ftol2_sse C:\Users\User\Downloads\asm.masm32-graphical-effects\MASM32-graphical-effects\HaZE\bones.exe : fatal error LNK1120: 2 unresolved externals do you guys think it might require another msvcrt lib but newer version or libcmt lib ? this aboutbo…

Hello i'm need source code Patching template delphi/visual studio

CIM_Chip Read-only >/https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/cim-chip Is there a way to spoof this value? In case the Unpack program can't do it.

Hi guys, today I would like to ask how to implement a 100% working handler to log exception.So in the past I tried already to do this and its also working so far but I think its not working always so that the reason why I do ask to know how to do it correctly.So the main basic way I choosed is only using SetUnhandledExceptionFilter API with address to my Handler routine to read exception infos / log them / MessageBox them. invoke SetUnhandledExceptionFilter,offset HANDLER_SEH2 HANDLER_SEH2 proc log code etc invoke MessageBox,NULL, BUFFIS,chr$("Exception Info!"),MB_ICONINFORMATION mov eax, 1h ret As result I get this so far (mostly)... 30.08.2017 21:00…

Hi guys, I have a new problem and need some help.I wanna create a edit / static control and make the edit field transparent (onlyy text should be visible).I found some MASM examples... https://www.masmforum.com/archive2012/ ...but somehow there are not so good etc.So what I want to know is how to make such controls transparent without to know the background.I don't know whether there is any image/bitmap or anything else in the background etc so how to find it out and execute the right code to make the control transparent if I wanna do that?Is there a method or a function already I could use? greetz

Hi guys, does anyone know any function I could use to remove all unnecessary spaces from a text? Example: Here I have some text between spaces & tabs I want to trim to one spaces between! = Text above should change to this text below Here I have some text between spaces & tabs I want to trim to one spaces between! Something like this.Just asking before whether there is already any module XY function I could use before trying to write any own function for this.Thanks. greetz

foreach (FieldDef tdFlds in tdType.Fields) { if (tdFlds.ElementType == ElementType.End) { if (tdFlds.Name == "MyField") { byte[] fake = BitConverter.GetBytes(true); // set true Array.Resize(ref fake, (int)tdFlds.GetFieldSize()); tdFlds.InitialValue = fake; } } } How can the bool field be changed?

Hi guys, I have again some small questions about listview re-arragne issues.So in the past I changed my LV that only a seclected lines does switch the content with the hitted line during a drag.Now i wanted to change that again so that all selected lines gets inserted to hitted line below but here I have some trouble. Example: Some LV entrys. ---------------------------- 123 456 789 101112 ---------------------------- I want the selected lines insert to hitted line exactly like the selection was.So I got it working if I move the selected lines below to a line but above its exactly else.How can I do it to make it match like I did secleted the lines?I am ju…

Hi guys, I see some problem when using the normal GetPrivateProfileString & WritePrivateProfileString function to store lines into a file and read them.All works for normal lines without CRLF but the GetPrivateProfileString function dosen't read the stored multiline/s which was saved with WritePrivateProfileString function. Why do they differ?Write works & Read not?In this case I can not use GetPrivateProfileString function to read some entry from file. I'am using a edit control with multilines & wantreturn style and wanna save / read whole text parts to file.How could I do that in best case?Just asking before whether they are any functions I could …

Hi. I would like some help on some advanced subject for me. I'm doing my first steps to create a proxy dlls for practice. I use VS2008 and 2010. So assuming i have a simple crackme. Ηypothetically to get the registered message, offsets with patches are: 0x1234: 73->90 and 0x1235: 33->90. offsets[] = {0x1234, 0x1235}; srcbytes[] = {0x73, 0x33}; rplbytes[] = {0x90. 0x90}; Ok with this. Now i will explaing what i do quickly. I try to locate possible dlls and i'm finding, hypothetically again, "version.dll". (Using Procomon -> filters: Procces name..is -> crackme.exe, Path...ends -> dll, Result...contains -> NAME NOT FOUND). A…

Good morning. What is the difference in practical level of Union compared to Struct? In what cases (examples) Union is/should be, used? -Thank you

var module = ModuleDefMD.Load(@"C:\Temp\DemoDLL.dll"); var type = module.GetTypes().FirstOrDefault(t => t.Name == "Demo"); // Create the Main signature var main = new MethodDefUser("Main", MethodSig.CreateStatic(module.CorLibTypes.Void, new SZArraySig(module.CorLibTypes.String))) { Attributes = MethodAttributes.Static, ImplAttributes = MethodImplAttributes.IL | MethodImplAttributes.Managed }; // Add Main param main.ParamDefs.Add(new ParamDefUser("args", 1)); // Create Main body var mainBody = new CilBody(); main.Body…

Hello. During coding a keygen i have this issue. The keygenme calculates a SHA-256 which is stored in a string. After that it adds DWORD values of the SHA. Because my english is not so good to explain i put a simpler (similar) example to see whats going on. I have make some progress but i have stuck one this: Why sscanf doesnt put in eax the correct value starting from sha_256[0]. (Eax should contain the value 0x64ec88ca) How i can fix this? -Thank you

Hi all I'm trying to compile simple c program with animated title bar (swapping letter case) but unfortunately I'm stuck with CreateThread in x64. Here is my sample code: DWORD WINAPI animate(HWND hWnd); HANDLE hthread; case WM_INITDIALOG: SendMessageA(hWnd, WM_SETICON, (WPARAM) 1, (LPARAM) LoadIconA(hInst, MAKEINTRESOURCE(IDI_ICON))); hthread = CreateThread(0, 0, animate, hWnd, 0, 0); DWORD WINAPI animate(HWND hWnd) { unsigned char wincaption[24]; unsigned int i; SendMessageA(hWnd, WM_GETTEXT, 24, (LPARAM)wincaption); do { for(i=0;i<19;i++) { if (((wincaption[i] >= 0x41) && (wincaption[i] <= 0x5A)) || ((wincaption[i] >= 0x61)…

I am porting some tools over to vcpkg package manager. Maybe it's just too late, but it seems to me the capstone package on vcpkg is broken. Installed with vcpkg install capstone:x64_windows. The following: cs_open(CS_ARCH_X86, CS_MODE_64, &handle); returns CS_ERR_ARCH, because the x86-init function in static cs_err (*cs_arch_init[MAX_ARCH])(cs_struct *) = { in cs.c is Null. Which would suggest that CAPSTONE_HAS_X86 was not defined during compilation of the package. Can someone confirm this?

I want to find a string from a process memory and change it through C#. My current code to modify the string via its address: [DllImport("kernel32.dll")] public static extern IntPtr OpenProcess(int dwDesiredAccess, bool bInheritHandle, int dwProcessId); [DllImport("kernel32.dll", SetLastError = true)] static extern bool WriteProcessMemory(int hProcess, int lpBaseAddress, byte[] lpBuffer, int dwSize, ref int lpNumberOfBytesWritten); private void button1_Click(object sender, EventArgs e) { var process = Process.GetProcessesByName("ProcessName").FirstOrDefault(); IntPtr processHandle = OpenProcess(0x1F0FFF, false, process.Id); int bytesWritten = 0; byte[] buffer = En…

Hello, I'm working on a x64 Framework 4.7.2 application obfuscated with Crypto "x64 Crypto Obfuscator For .Net v7 (v2020)", I'm able to restore strings and mostly deobfuscate the app but I'm having difficulties with restore delegates. Here's an example public GForm4() { this.method_6(); Delegate108.smethod_0(Class0.smethod_0(6600) != 0); Delegate60.smethod_0(this, new EventHandler(this.method_0)); } Unfortunately most of @CodeExplorer / SnD's excellent tools give an "invalid assembly" error as it's x64? I'll be grateful for any tips or tools to restore delegates please. thanks in advance

Hi all i was working on a crack template now and adding the fade bitmaps effect in the dialog. the thing is when i try to modify its width (adding greater than 122h), the template crashes. but when i normalize it to 122h (which was one of TMG's old bitmap's width value), the effect works without problems but the bmp isn't really complete. xor ebx,ebx invoke LoadBitmap,hInstance,201 mov dword_401EB0, eax mov LogoHeight, 7Ah jmp short loc_401AFD …

Hi folks, I hope you're doing well I made a simple dll injector in .net which appears to work just fine, tested using megadumper, when I dump process I find the injected dll in the folder called Dumps. this is the code that I used : Public Function inject() As Integer Dim targetProcess As Process For Each pro As Process In Process.GetProcesses If pro.MainWindowTitle = "test" Then targetProcess = pro Exit For End If Next Dim procHandle As IntPtr = OpenProcess(PROCESS_CREATE_THREAD Or PROCESS_QUERY_INFORMATION Or PROCESS_VM_OPERATION Or PROCESS_VM_WRITE Or PROCESS_VM_READ,…

Hi. I was solving a keyfile me today, and most of the keymaker i made was with inline assembly, because straight in C i was getting wrong values. For now i have 2 questions. I'm not on my laptop right now so i'll try to remember as much close as possible the values 1) Is possible to achieve that with the (right) way, like i have it below? : DWORD eax; eax = 0xF96A872D; /* I want the result: eax = 0xF96A78D2. Even if i "fixed" little the data types/macros i will get either eax: 0xFFFF78D2 or eax: 0x000078D2 */ LOWORD(eax) = ~(WORD)eax; 2) As my comment says i'm getting ebx = 0x18de781b and not ebx = 0xf8de781b. How ca…