Programming and Coding

help in writing ida plugins

February 1, 2009 by abhijit mohanta

0 replies
2.8k views

I have written simple hellpoworld ida plugin using devcpp on windows ida plugin dev kit.I have put the .plw file into plugins path in ida . plugin sdk version 5.2 ida version 5.2 but I dont see the plugin coming in ida edit-->plugins options.I tried to configure plugins.cfg file still no results.I want to know whats wrong.I have even tried to place some readymade plugins in the plugin folder I see some of them orking while others not.Can anyone suggest on this. plugin source code #include <ida.hpp> #include <idp.hpp> #include <loader.hpp> int IDAP_init(void) { } void IDAP_term(void) { return; } void IDAP_run(int arg) { msg("hello world"); return…

Last reply by abhijit mohanta, February 1, 2009

[Delphi] HoundPE

September 12, 2008 by steve10120

15 replies
6.5k views

HoundPE.rar

Last reply by zooley, January 29, 2009

[MASM32] A wsprintf prototype replacement

January 29, 2009 by bigboss-62

0 replies
3.7k views

Hello guys... The wsprintf function is very cool, but it destroy most of registers. The most important in this function is the conversion, and the only needed return value is the size of formatted buffer. I have written the following prototype to include some functions of wsprintf, and the only modified value in return was eax, which contains the size of buffer. Also included is a test program. Currently supports: - %s (string) - %??d (decimal signed, up to 16 chars displayed) - %??X (haxadecimal, up to 16 chars displayed) - %??u (decimal, up to 16 chars displayed). The working method is like the original wsprintf function... Any comments / ideas / tests are welcome... La…

Last reply by bigboss-62, January 29, 2009

[C++] How to use isdebuggerpresent?

January 22, 2009 by unix

9 replies
16.5k views

Hi, I want to write a little program, which should only consists out of two or three specific functions as i want then to analyse it with ollydbg and see if i can figure it out, how the asm code actually works. Unfortunately i have some problems, maybe someone can help me. I am using Microsoft Visual C++ 2008 Express Edition as my IDE, but the code seems already a little 'overwhelmed' when i wrote a program which only prints hello world. The basic source looks like this: using namespace std;int _tmain(int argc, _TCHAR* argv[]) { cout << "Hello World\n"; system("pause"); return 0; }When i try to analyse this with ollydbg, i get the following message when opening: …

Last reply by enhzflep, January 29, 2009

[Help]C++ Dumping a dll's memory

January 27, 2009 by urbanyoung

4 replies
3.9k views

Hey, I'm trying to dump a dll in memory using c++, the actual dumping is fine but I'm looking for help in fixing he virtual addresses. At the moment I am dumping the virtual addresses but need to change them to the offset (i think that's right). I know I'm not being very clear, so I'll post some code. 01E5102A A1 1444E901 MOV EAX,DWORD PTR DS:[1E94414]Of course because I'm not changing the virtual address code, the dump will crash when run (because it will try to mov 1E94414 into eax, which is an invalid address). I'd really appreciate some help, I looked around the forum but couldn't find anything that helped.

Last reply by urbanyoung, January 27, 2009

cppInjector v.1.1

January 3, 2009 by 0xFF

15 replies
6.9k views

Features: Process Information. Module Unloader. Process Watcher. Fixes: No more memory leaks. http://www.speedyshare.com/716737345.html

Last reply by without.hat, January 25, 2009

(Asm) How to get 2nd string from given string?

January 24, 2009 by busclock

1 reply
4.5k views

I need to modify some source code. I need to get a 2nd string from given string which contains 2 string. The length of 1st string is always changed time to time. For example: NuQW4CSS0Qpa8TnZor in hex: 01 01 01 01 01 01 01 01 1C 01 01 01 01 01 08 4E 75 51 57 34 43 53 53 01 01 01 01 01 08 30 51 70 61 38 54 6E 5Athe 1st string NuQW4CSS (4E 75 51 57 34 43 53 53) it begins with 1 byte in front (08) as the length of the string the 2nd string 0Qpa8TnZ (30 51 70 61 38 54 6E 5A) it also begins with 1 byte in front (08) as the length of the string The problem in the source code i got is, it gets the 2nd string with fixed method, always get it from the 29th byte, which is actually …

Last reply by Ufo-Pu55y, January 24, 2009

how to disable "no matching symbolic information found"

January 24, 2009 by alaphate

0 replies
3.2k views

I'm using VC6.0 In Debug Output Window, there're lots of "no matching symbolic information found" e.g. How to disable these message without installing debug symbols? Thanks for helping.

Last reply by alaphate, January 24, 2009

Chiptunes in Visual Basic

January 17, 2009 by Bleed

6 replies
5k views

Hi, I was just playing around in visual basic 6 and some idea from nowhere came. The idea was to add music to my projects. I was thinking of using chiptunes (xm or mod) but I don't know how. Please do help me if this is possible. Thanks.

Last reply by Bleed, January 23, 2009

Need source

January 20, 2009 by _ak47_

2 replies
3.3k views

hello everyone I just make this post beacuase I looK for any cryptersuorce made in VB If anybody have one please shared it for me thanks

Last reply by TreaxeR, January 21, 2009

C# Pe packer

January 16, 2009 by 0ron

4 replies
4.9k views

Does anyone have source for a C# exe or dll packer?

Last reply by 0ron, January 20, 2009

Ripping code delphi

January 14, 2009 by nosconf

7 replies
4k views

Is it possible to rip asm code and use it in delphi? Many thanks NoScONf

Last reply by BoRoV, January 17, 2009

how to draw MessageBox buttons

January 8, 2009 by alaphate

4 replies
3.5k views

I found a article about how to change the button text of MessageBox. http://www.codeguru.com/cpp/w-p/win32/mess...icle.php/c10873 Could Any buddy tell me how to draw MessageBox buttons? Such as IDOK button IDCANCEL button I know how to make these buttons to OWNERDRAW buttons in CBTProc hook procedure. i.e. SendMessage(hMB,BM_SETSTYLE,BS_OWNERDRAW,TRUE); However, I don't figure out how to draw these buttons. Thanks for help.

Last reply by alaphate, January 15, 2009

HVLPlay : A AHX/HVL playback library in C

October 10, 2008 by mudlord

13 replies
4.8k views

Hello, Here's some stuff I have been mucking around with since WinAHX has a tendency to play some AHX tunes completely wrong. This lib is based on Xeron/IRIS's official code, straight from the official replayer and Winamp plugin sources. CPU usage of the library is very small too (around 0-4% on a E2200 dual core). The lib is public domain and is built with MSVC6. Included is the source code as well as a usage example. hvlplay.zip

Last reply by mudlord, January 14, 2009

Interview with a former adware author

January 14, 2009 by glaufan

1 reply
3.2k views

Interesting interview http://philosecurity.org/2009/01/12/interv...n-adware-author

Last reply by cyberbob, January 14, 2009

purely functional Keygen written in Haskell - source code

September 25, 2008 by glaufan

11 replies
7.6k views

hi This post is in literate Haskell which means the entire post can be posted into a .lhs file and compiled by GHC. Haskell is a lazy pure functional programming language named after the logician Haskell Curry. http://en.wikipedia.org/wiki/Haskell_(programming_language) http://haskell.org The following code generates a random cd key for an old game, Battlefield 1942. I derived the keygen method with OllyDBG on a random keygen I found on astalavista. Thanks NaG-Scrim/Fighting For Fun - it had good music ;D but your generated code is weird, either msvc6 is not so smart at optimization or your src code is strange, never mind I still made sense of the larger picture. &gt…

Last reply by glaufan, January 13, 2009

Copying A Fille U/ Dynamic Array

January 13, 2009 by 0xFF

0 replies
2.7k views

a very simple procedure (add to private declaration unless other units need access to it) that'll read and write 1 byte each time using "for" loop to the file size, just look and read comments. This supports a progress bar for user interface ;] procedure TMainForm.Copy_File(Source, Dest: PChar; ProgressBar: TProgressBar); var MyArray: Array Of Byte; //Dynamic Array Of Byte hRead, hWrite: THandle; //Handles returned by CreateFile, usage for Reading file size and writing the new file lpNumberOfBytesWritten: Cardinal; //Store how many bytes have been written lpNumberOfBytesReaded: Cardinal; //Store how many bytes have been readed nFileSize: Integer; //Stores the size of t…

Last reply by 0xFF, January 13, 2009

Dll injection + message loop

January 7, 2009 by Killboy

5 replies
5.9k views

Hi I'm injecting a Dll into a process, the Dll then creates an empty window (creating a new class + Createwindow). In my main process, I find the window with FindWindow(ClassName, NULL) and send WM_COPYDATA to it with the stuff it needs to handle. The problem is that I need a message loop for my window to receive messages sent to it. If I create the window and start the loop in DllMain (on DLL_PROCESS_ATTACH), I never return, thus I can't check if the Dll injection worked. (I could check if the window existed, but I dont really like that) So I created a thread from DllMain, in which I create the window and loop the messages. This works, but it feels weird. I wanted…

Last reply by Hikaru, January 12, 2009

[C++ Release] PatchLib

April 29, 2008 by atom0s

19 replies
6.1k views

No longer sharing this project on this site.

Last reply by atom0s, January 11, 2009

Hook KeInsertQueueApc

January 9, 2009 by dayed

3 replies
6.9k views

//By Dayed #include <ntddk.h> #include <ntifs.h> #include <windef.h> #include <Dayed.h> #include <LDasm.h> #define PS_CLEAR_BITS(Flags, Flag) \ RtlInterlockedClearBitsDiscardReturn (Flags, Flag) #define PS_CROSS_THREAD_FLAGS_TERMINATED 0x00000001UL //================================================================================ ================ BYTE g_HookCode[5] = { 0xe9, 0, 0, 0, 0 }; BYTE g_OrigCode[5] = { 0 }; BYTE jmp_orig_code[7] = { 0xEA, 0, 0, 0, 0, 0x08, 0x00 }; //------------------------------------------------------------ ULONG g_ProcessNameOffset = 0; ULONG g_ThreadFlagsOffset=0; ULONG OldMask; …

Last reply by dayed, January 10, 2009

Need C# Patch And Keygen Source For Studying

September 24, 2008 by r00t_H@ck3r

9 replies
6.4k views

Need C# Patch And Keygen Source For Studying Purpose Thanks.

Last reply by oricode, January 6, 2009

Resolve method handle with cecil?

December 31, 2008 by high6

1 reply
2.9k views

How do you do something like ModuleHandle.ResolveMethodHandle(token); in cecil? Assembly.MainModule.MemberReferences doesn't contain all the references. Only way I can think is by loading each referenced assembly and check it. Would be very very slow though... (also locating the assemblies...)

Last reply by high6, January 5, 2009

SendMessage in a debugger in another thread

January 3, 2009 by Killboy

2 replies
4.9k views

Hi, I was trying to inject a dll into a process and use WM_COPYDATA for sending the data needed for the dll to work. The problem is that I'm in the middle of the debug loop, ie the remote thread on LoadLibrary doesn't return until I loop through WaitForDebugEvent/ContinueDebugEvent. So I called it in another thread, and found something weird happening: When I call SendMessage (logging something to a listbox) in the thread, it doesn't return and seems to hang up. At the same time, WaitForDebugEvent hangs up as well, and doesn't return (it's set to INFINITE). I found this at MSDN but I'm probably too retarded to get it... The thread sending the messages waits for SendMessa…

Last reply by Killboy, January 4, 2009

VisualAssistX Patch

January 1, 2009 by high6

3 replies
4.9k views

Posted this on another forum and thought I should post it here too. This is how I made a .dll loader for VisualAssistX.

Last reply by Shub-Nigurrath, January 2, 2009

Yoda's Protector 1.03.3 source

January 1, 2009 by 0ron

2 replies
4.1k views

Does anyone have the source for Yoda's Protector 1.03.3 source? I found version 1.02. Anyone have it?

Last reply by Killboy, January 2, 2009

Sign In