Programming and Coding

[Help]C++ Dumping a dll's memory

January 27, 2009 by urbanyoung

4 replies
3.8k views

Hey, I'm trying to dump a dll in memory using c++, the actual dumping is fine but I'm looking for help in fixing he virtual addresses. At the moment I am dumping the virtual addresses but need to change them to the offset (i think that's right). I know I'm not being very clear, so I'll post some code. 01E5102A A1 1444E901 MOV EAX,DWORD PTR DS:[1E94414]Of course because I'm not changing the virtual address code, the dump will crash when run (because it will try to mov 1E94414 into eax, which is an invalid address). I'd really appreciate some help, I looked around the forum but couldn't find anything that helped.

Last reply by urbanyoung, January 27, 2009

cppInjector v.1.1

January 3, 2009 by 0xFF

15 replies
6.8k views

Features: Process Information. Module Unloader. Process Watcher. Fixes: No more memory leaks. http://www.speedyshare.com/716737345.html

Last reply by without.hat, January 25, 2009

(Asm) How to get 2nd string from given string?

January 24, 2009 by busclock

1 reply
4.4k views

I need to modify some source code. I need to get a 2nd string from given string which contains 2 string. The length of 1st string is always changed time to time. For example: NuQW4CSS0Qpa8TnZor in hex: 01 01 01 01 01 01 01 01 1C 01 01 01 01 01 08 4E 75 51 57 34 43 53 53 01 01 01 01 01 08 30 51 70 61 38 54 6E 5Athe 1st string NuQW4CSS (4E 75 51 57 34 43 53 53) it begins with 1 byte in front (08) as the length of the string the 2nd string 0Qpa8TnZ (30 51 70 61 38 54 6E 5A) it also begins with 1 byte in front (08) as the length of the string The problem in the source code i got is, it gets the 2nd string with fixed method, always get it from the 29th byte, which is actually …

Last reply by Ufo-Pu55y, January 24, 2009

how to disable "no matching symbolic information found"

January 24, 2009 by alaphate

0 replies
3.1k views

I'm using VC6.0 In Debug Output Window, there're lots of "no matching symbolic information found" e.g. How to disable these message without installing debug symbols? Thanks for helping.

Last reply by alaphate, January 24, 2009

Chiptunes in Visual Basic

January 17, 2009 by Bleed

6 replies
4.9k views

Hi, I was just playing around in visual basic 6 and some idea from nowhere came. The idea was to add music to my projects. I was thinking of using chiptunes (xm or mod) but I don't know how. Please do help me if this is possible. Thanks.

Last reply by Bleed, January 23, 2009

Need source

January 20, 2009 by _ak47_

2 replies
3.2k views

hello everyone I just make this post beacuase I looK for any cryptersuorce made in VB If anybody have one please shared it for me thanks

Last reply by TreaxeR, January 21, 2009

C# Pe packer

January 16, 2009 by 0ron

4 replies
4.9k views

Does anyone have source for a C# exe or dll packer?

Last reply by 0ron, January 20, 2009

Ripping code delphi

January 14, 2009 by nosconf

7 replies
3.9k views

Is it possible to rip asm code and use it in delphi? Many thanks NoScONf

Last reply by BoRoV, January 17, 2009

how to draw MessageBox buttons

January 8, 2009 by alaphate

4 replies
3.4k views

I found a article about how to change the button text of MessageBox. http://www.codeguru.com/cpp/w-p/win32/mess...icle.php/c10873 Could Any buddy tell me how to draw MessageBox buttons? Such as IDOK button IDCANCEL button I know how to make these buttons to OWNERDRAW buttons in CBTProc hook procedure. i.e. SendMessage(hMB,BM_SETSTYLE,BS_OWNERDRAW,TRUE); However, I don't figure out how to draw these buttons. Thanks for help.

Last reply by alaphate, January 15, 2009

HVLPlay : A AHX/HVL playback library in C

October 10, 2008 by mudlord

13 replies
4.7k views

Hello, Here's some stuff I have been mucking around with since WinAHX has a tendency to play some AHX tunes completely wrong. This lib is based on Xeron/IRIS's official code, straight from the official replayer and Winamp plugin sources. CPU usage of the library is very small too (around 0-4% on a E2200 dual core). The lib is public domain and is built with MSVC6. Included is the source code as well as a usage example. hvlplay.zip

Last reply by mudlord, January 14, 2009

Interview with a former adware author

January 14, 2009 by glaufan

1 reply
3.1k views

Interesting interview http://philosecurity.org/2009/01/12/interv...n-adware-author

Last reply by cyberbob, January 14, 2009

purely functional Keygen written in Haskell - source code

September 25, 2008 by glaufan

11 replies
7.5k views

hi This post is in literate Haskell which means the entire post can be posted into a .lhs file and compiled by GHC. Haskell is a lazy pure functional programming language named after the logician Haskell Curry. http://en.wikipedia.org/wiki/Haskell_(programming_language) http://haskell.org The following code generates a random cd key for an old game, Battlefield 1942. I derived the keygen method with OllyDBG on a random keygen I found on astalavista. Thanks NaG-Scrim/Fighting For Fun - it had good music ;D but your generated code is weird, either msvc6 is not so smart at optimization or your src code is strange, never mind I still made sense of the larger picture. &gt…

Last reply by glaufan, January 13, 2009

Copying A Fille U/ Dynamic Array

January 13, 2009 by 0xFF

0 replies
2.6k views

a very simple procedure (add to private declaration unless other units need access to it) that'll read and write 1 byte each time using "for" loop to the file size, just look and read comments. This supports a progress bar for user interface ;] procedure TMainForm.Copy_File(Source, Dest: PChar; ProgressBar: TProgressBar); var MyArray: Array Of Byte; //Dynamic Array Of Byte hRead, hWrite: THandle; //Handles returned by CreateFile, usage for Reading file size and writing the new file lpNumberOfBytesWritten: Cardinal; //Store how many bytes have been written lpNumberOfBytesReaded: Cardinal; //Store how many bytes have been readed nFileSize: Integer; //Stores the size of t…

Last reply by 0xFF, January 13, 2009

Dll injection + message loop

January 7, 2009 by Killboy

5 replies
5.8k views

Hi I'm injecting a Dll into a process, the Dll then creates an empty window (creating a new class + Createwindow). In my main process, I find the window with FindWindow(ClassName, NULL) and send WM_COPYDATA to it with the stuff it needs to handle. The problem is that I need a message loop for my window to receive messages sent to it. If I create the window and start the loop in DllMain (on DLL_PROCESS_ATTACH), I never return, thus I can't check if the Dll injection worked. (I could check if the window existed, but I dont really like that) So I created a thread from DllMain, in which I create the window and loop the messages. This works, but it feels weird. I wanted…

Last reply by Hikaru, January 12, 2009

[C++ Release] PatchLib

April 29, 2008 by atom0s

19 replies
6k views

No longer sharing this project on this site.

Last reply by atom0s, January 11, 2009

Hook KeInsertQueueApc

January 9, 2009 by dayed

3 replies
6.8k views

//By Dayed #include <ntddk.h> #include <ntifs.h> #include <windef.h> #include <Dayed.h> #include <LDasm.h> #define PS_CLEAR_BITS(Flags, Flag) \ RtlInterlockedClearBitsDiscardReturn (Flags, Flag) #define PS_CROSS_THREAD_FLAGS_TERMINATED 0x00000001UL //================================================================================ ================ BYTE g_HookCode[5] = { 0xe9, 0, 0, 0, 0 }; BYTE g_OrigCode[5] = { 0 }; BYTE jmp_orig_code[7] = { 0xEA, 0, 0, 0, 0, 0x08, 0x00 }; //------------------------------------------------------------ ULONG g_ProcessNameOffset = 0; ULONG g_ThreadFlagsOffset=0; ULONG OldMask; …

Last reply by dayed, January 10, 2009

Need C# Patch And Keygen Source For Studying

September 24, 2008 by r00t_H@ck3r

9 replies
6.3k views

Need C# Patch And Keygen Source For Studying Purpose Thanks.

Last reply by oricode, January 6, 2009

Resolve method handle with cecil?

December 31, 2008 by high6

1 reply
2.8k views

How do you do something like ModuleHandle.ResolveMethodHandle(token); in cecil? Assembly.MainModule.MemberReferences doesn't contain all the references. Only way I can think is by loading each referenced assembly and check it. Would be very very slow though... (also locating the assemblies...)

Last reply by high6, January 5, 2009

SendMessage in a debugger in another thread

January 3, 2009 by Killboy

2 replies
4.7k views

Hi, I was trying to inject a dll into a process and use WM_COPYDATA for sending the data needed for the dll to work. The problem is that I'm in the middle of the debug loop, ie the remote thread on LoadLibrary doesn't return until I loop through WaitForDebugEvent/ContinueDebugEvent. So I called it in another thread, and found something weird happening: When I call SendMessage (logging something to a listbox) in the thread, it doesn't return and seems to hang up. At the same time, WaitForDebugEvent hangs up as well, and doesn't return (it's set to INFINITE). I found this at MSDN but I'm probably too retarded to get it... The thread sending the messages waits for SendMessa…

Last reply by Killboy, January 4, 2009

VisualAssistX Patch

January 1, 2009 by high6

3 replies
4.8k views

Posted this on another forum and thought I should post it here too. This is how I made a .dll loader for VisualAssistX.

Last reply by Shub-Nigurrath, January 2, 2009

Yoda's Protector 1.03.3 source

January 1, 2009 by 0ron

2 replies
4k views

Does anyone have the source for Yoda's Protector 1.03.3 source? I found version 1.02. Anyone have it?

Last reply by Killboy, January 2, 2009

keep the window on top

December 28, 2008 by Bleed

4 replies
3.5k views

Hi, I'm coding on some win32 c++ app. What API should I use to keep the window on top of other windows regardless if it is selected or not? I'm just guessing it is an API, but I'm not sure if it is one.

Last reply by 0xFF, January 1, 2009

[HELP!] Keygen About Dialog

January 1, 2009 by DeRoX

1 reply
3.3k views

hey community, i need some help in ASM. I use a keygen template from UFO-Pu55y. I modified it a little bit for a about button to show a new window with a text in a bitmap. my problem is to get the cursor animation same like the main window. If the about dialog pops up the mouse cursor is changing to normal. i'm sitting here for 4 hours and i don't get it to work. About proc hWnd:DWORD,uMsg:DWORD,wParam:DWORD,lParam:DWORDlocal ps:PAINTSTRUCT.if uMsg == WM_INITDIALOG invoke SetWindowPos,hWnd,HWND_TOPMOST,0,0,0,0,SWP_NOMOVE + SWP_NOSIZE invoke LoadPng,1501,addr sizeAbout mov hAboutBg,eax invoke CreatePatternBrush,hAboutBg mov hAboutBrush,eax invoke CreateFontIndir…

Last reply by DeRoX, January 1, 2009

Using WIN32 APIs

January 1, 2009 by Nieylana

0 replies
3.7k views

Last night I decided to try and see if it was possible to create a messagebox in VB6 without using the built in MsgBox function. I chose to do this because the MsgBox function actually calls rtcMessageBox() located in the MSVBVM DLL. I wanted my application to instead of using this function, use the MessageBox function located in USER32.DLL. The Link below takes you to my source code on how i did it. It was done by executing some pre-compiled ASM that is executed from VB. In order to see what the ASM is doing, compile the program and debug it using Olly. Then place a BP on CallWindowProcA. Run the application, when it breaks... right click on ESP+4 (PrevProc) and se…

Last reply by Nieylana, January 1, 2009

[Help] Process Dumper - Delphi

December 2, 2008 by steve10120

1 follower
16 replies
7.4k views

Hi, I'm trying to make a dumper, but run into some problems. program Delphi;uses Windows, SysUtils;{$R *.res}type TByteArray = array of Byte;var hMod: THandle; hOpen: THandle; hFile: THandle; IDH: TImageDosHeader; INH: TImageNtHeaders; ISH: TImageSectionHeader; dRead: DWORD; dWritten: DWORD; dSize: DWORD; bBuff: TByteArray; i: integer; begin hMod := GetModuleHandle(nil); hOpen := GetCurrentProcess; if ReadProcessMemory(hOpen, Ptr(hMod), @IDH, SizeOf(IDH), dRead) then begin hFile := CreateFile(PChar('dumped.exe'), GENERIC_WRITE, FILE_SHARE_WRITE, nil, CREATE_ALWAYS, 0, 0); if hFile <> INVALID_HANDLE_VALUE then begin SetLength(bBuff, SizeOf(I…

Last reply by steve10120, December 29, 2008

Sign In