|
I want to write a tool like PEid's PE signature viewer. A tool for compiler detection (by signature bytes).
|
|
|
|
|
Does this tool detect the compiler or the linker?
"Take only what you need and leave the land as you found it." - Native American Proverb
|
|
|
|
|
this tool will try to detect the compiler (and the cryptor or exe modifier)
|
|
|
|
|
I know the linker writes information to the EXE that can be retrieved, but are you sure that the compiler does too?
"Take only what you need and leave the land as you found it." - Native American Proverb
|
|
|
|
|
I only know that every exe has a signature bytes at the entrypoint of the exe. (i mean that the first 128 bytes at the entrypoint are the signature bytes, they help to identify the compliler). And these signature bytes are modified by the protectors, packers.
|
|
|
|
|
zooley wrote: Can anybody tell me how can i acces the first bytes at the entrypoint of an exe.
HANDLE hFile = CreateFile(..., GENERIC_READ, FILE_SHARE_READ, ...);
DWORD dwRead;
BYTE byte1, byte2;
ReadFile(hFile, &byte1, 1, &dwRead, NULL);
ReadFile(hFile, &byte2, 1, &dwRead, NULL);
...
CloseHandle(hFile); zooley wrote: ...but i don't know how i can translate the entrypoint to fileoffset...
What exactly do you mean by this?
"Take only what you need and leave the land as you found it." - Native American Proverb
|
|
|
|
|
Any suugestions all welkomed. Thanx!
|
|
|
|
|
zooley wrote: Any suugestions all welkomed.
What's wrong with the one I offered?
"Take only what you need and leave the land as you found it." - Native American Proverb
|
|
|
|
|
it is good, thanx for it.
|
|
|
|
|
I am trying to incorporate headers from one program into another. The host program compiles fine until I add my stdafx.h which includes:
#include afxwin.h // MFC core and standard components
#include afxext.h // MFC extensions
#include afxdisp.h // MFC Automation classes
#include afxdtctl.h // MFC support for Internet Explorer 4 Common Controls
#ifndef _AFX_NO_AFXCMN_SUPPORT
#include afxcmn.h
//(syntax edited for posting)
it then generates errors such as these in which there seems to be an ambiguity between winsock.h and winsock2.h:
c:\Documents and Settings\Brenaman\Desktop\UAV Simulator\use\SourceCode\use_ios\Globals\globals_socket_ext.h(13): error C2146: syntax error : missing ';' before identifier 'socketData'
c:\Documents and Settings\Brenaman\Desktop\UAV Simulator\use\SourceCode\use_ios\Globals\typedefs.h(41): error C2501: 'gameport::capability' : missing storage-class or type specifiers
c:\Documents and Settings\Brenaman\Desktop\UAV Simulator\use\SourceCode\use_ios\Globals\globals_socket_ext.h(15): error C2501: 'recvSockAddr' : missing storage-class or type specifiers
I've tried various things:
#define _WINSOCKAPI_ in various places to disinclude winsock.h in windows.h.
Editing windows.h to include winsock2 instead of winsock.
Various #include sequences.
Thank you in advance for any help.
- Chris
|
|
|
|
|
Did u try changing the seqence of the include fine
i also faced the same problem with the socket file,
i dont remeber what i did to solve the problem but
the stdafx if defined before the winsock header file
I have declared the Objects of winsock as global variables.
Vikas Amin
Embin Technology
Bombay
vikas.amin@embin.com
|
|
|
|
|
As a rule, you don't #include stdafx.h in other .h files; you just make it the first #include in your .cpp files.
DON'T modify windows.h . Ever. Millions of people use it, as-is, perfectly successfully without editting it.
Take a look at the winsock samples to see what you're doing wrong.
Software Zen: delete this;
|
|
|
|
|
Do you know where to locate redistributable DLL of VC++ 8 (nov 2005)?
(CRT and MFC)
I tried in system32, but the application is not running.
Thanks.
|
|
|
|
|
|
|
Hello Friends
I have Windows 2003 Server Installed on my Server. Whenever my server goes off or electricity problem and server gets restarted automatically, at the end it asks for the reason why server was rebotted giving one dialog for writing one comment.
I want to overcome this problem, so is there any setting or any way such as to write some service or something which automatically removes that dialog or I don't get dialog or something else....
Any solution is most welcomed.....
I have written this question in VC++ section as I think using VC++ it might be possible to kill that dialog or like that.......
Thanks in advance.
Amarelia Maehsh
Gujarat
India
|
|
|
|
|
U can create a programe to get the handle
of the dialogbox window . By using this
handle u can close the window.
How to identify the window is by using the
window text.
This will work fine . Hope so u get it ....
.......
Vikas Amin
Embin Technology
Bombay
vikas.amin@embin.com
|
|
|
|
|
Try here[^] and here[^].
Software Zen: delete this;
|
|
|
|
|
how to read the data from editbox in form of UNICODE
|
|
|
|
|
Humm.. call Function GetWindowTextW(...);( I.e. wide character) for reteriving text from the edit box
"Opinions are neither right nor wrong. I cannot change your opinion. I can, however, change what influences your opinion." - David Crow
cheers,
Alok Gupta
VC Forum Q&A :- I/ IV
|
|
|
|
|
Hi all
Please tell me that how can I find all the identities in Outlook Express programatically, and find all the folders for corresponding identity.
Please help.
Thanks & Regrds.
Edit/Delete Message
|
|
|
|
|
|
Hi
I went through to the given link and using following code
<br />
IImnAccountManager *m_pAccountManager;<br />
HRESULT hr = CoCreateInstance(CLSID_ImnAccountManager, NULL, CLSCTX_SERVER, <br />
IID_IImnAccountManager, (LPVOID*) &m_pAccountManager);<br />
if(FAILED(hr)) <br />
{<br />
MessageBox(_T("Error creating IImnAccountManager."), _T("Demo Error"));<br />
EndDialog(1);<br />
return FALSE;<br />
}<br />
<br />
<br />
<br />
m_pAccountManager->Init(NULL);<br />
<br />
<br />
ACCTTYPE acct;<br />
ULONG ulAccounts;<br />
m_pAccountManager->GetAccountCount(acct,&ulAccounts);<br />
but after last line it gives error
"Unhandled Exception in Demo.exe(MSOEACCT.DLL)0xC0000005 Access Violation."
So please tell me that how can I remove this error.
Thanks
|
|
|
|
|
After stroking SHIFT key five times, one dialog pops up to notify if to enable the sticky keys.
Do you know some way to disalbe this function and let it not shown when stroking the SHIFT key?
Thanks in advance!
|
|
|
|
|
Go to Control Panel->Accessiblity Options->KeyBoard tab
Uncheck -> (Use StickyKeys)
Click the corresponding Settings button of the settings section.
UnCheck -> (Use ShortCut)
That's it.
<marquee direction="up" height="30" scrolldelay="1" step="1" scrollamount="1" hspace="0" vspace="0">
--Owner Drawn
--Nothing special
--Defeat is temporary but surrender is permanent
--Never say quits
--Jesus is Lord
|
|
|
|