madshi.net

Is this a possible way?: I have seen a bunch of programs that make use of windows hooks to get various information. For instance, revealing the text of passwords edit controls under Windows 2000 and XP is only possible by using a hook procedure and many keyloggers use keyboard hooks. Hooks are a pow...

Hello. I can disasamble my own code: var: a:^integer; b:TCodeInfo; begin a := ptr($00400010); b := parsecode(a); showmessage(inttohex(b.opcode,4)); b := parsecode(b.next); showmessage(inttohex(b.opcode,4)); end Is it possible, to use parsecode with the memory address of another process (calc.exe) ? ...

Thanks for your help!
ou make already very much for the Delphi users!

I don´t want you to code to whole thing for me. *G

I just won´t to learn. I will take a closer look on the nt headers.

Greetings
Alex

Hello.

I would like to generate the opcode for jump instructions.

Something like

x := genopcode(0040000, Jmp 0050000);
// x = E9FBFF0000


x := genopcode(0001000, Jnp 0050000);
// x = 0F8BFAEF0400

Mayby it´s alread builtin?

Greetings
Alex

Hello. Thanks for the great help. kernel32calcHandle := Process('calc.exe').Module('kernel32.dll').Handle; works very well. But i don´t understand the other code you posted... var nh : TImageNtHeaders; pnh : PImageNtHeaders; begin with Process('calc.exe') do if IsValid then begin pnh := Module('kern...

Hello. Thanks for the hint. Now it works with: var proc:Ihandle; test:cardinal; test2:integer; begin proc := process('calc.exe').Handle; test := proc.Handle; test2 := ProcessHandleToid(test); end I need the PID from the process. Can this be done easier? For the dll question... I need to get the base...

Hello. Just two little questions. Is there something to get the base address of a loaded dll? Mayby the base address of a specified section? The address of the loaded dll changes everytime it loads. Second.: Would be great, to have a function to find a process by process name. Somthing like the Find...

Hello. I have a little ole question.. Mayby some of you have an idea. I can crate my object with var test:olevariant; begin test:=createoleobject(test.application) test.application is an enumeration object... now I need something like. for each xyz in test do begin xyz.name := '123' xyz.value := end...