Search found 249 matches

by nildo
Mon Mar 28, 2011 6:14 pm
Forum: madCodeHook
Topic: Access violation when writting to answer inside IPC callback
Replies: 4
Views: 4410

Re: Access violation when writting to answer inside IPC call

Hmmm no way to reproduce, that's why I tryed asking here. Would you recomend a TRY EXCEPT or a "not isBadWritePtr" given your experience?

Thanks
by nildo
Mon Mar 28, 2011 2:43 pm
Forum: madCodeHook
Topic: Access violation when writting to answer inside IPC callback
Replies: 4
Views: 4410

Access violation when writting to answer inside IPC callback

Hello eveyone, Madshi, is it possible for your IPC engine to get lost and give us an address for the answer, inside the IPC callback, which is protected or not writtable? I'll explain. I have some IPC calls. Some of them have and some doesn't have an answer. The ones who have answer are just a boole...
by nildo
Wed May 05, 2010 1:01 am
Forum: madCodeHook
Topic: How can I hook Copy/Move Operation In VISTA?
Replies: 8
Views: 10617

powerlinm wrote:
nildo wrote:Are you sure you got the right CLSID? My one works perfectly for '3AD05575-8857-4850-9277-11B85BDB8E09'
can hook COPY/Move file of explorer.exe?

:D
http://stuani.blogspot.com/
by nildo
Thu Feb 04, 2010 9:52 am
Forum: madCodeHook
Topic: How can I hook Copy/Move Operation In VISTA?
Replies: 8
Views: 10617

Are you sure you got the right CLSID? My one works perfectly for '3AD05575-8857-4850-9277-11B85BDB8E09'
by nildo
Mon Nov 09, 2009 2:12 pm
Forum: madCodeHook
Topic: winsock hook - tracking socket handles
Replies: 4
Views: 5514

You need to duplicate. The socket handle is the same thing as a normal handle, you can close it, duplicate, etc.
by nildo
Wed Sep 02, 2009 11:04 am
Forum: madCodeHook
Topic: An idea to log the visited URLs?
Replies: 9
Views: 9103

What if you just simply catch messages comming from the browser edit "address bar"?
by nildo
Fri Jun 19, 2009 6:05 pm
Forum: madCodeHook
Topic: SendIpcMessage failing in some cases (Reproduceable)
Replies: 3
Views: 3750

nildo, What's the purpose of sending a NULL buffer anyhow? Are you simply trying to alert your application of something, if so, why not signal an event instead since you're passing no data. I agree that if the buffer is NULL SendIpcMessage should also return false always. Maybe Madshi will change t...
by nildo
Fri Jun 19, 2009 11:16 am
Forum: madCodeHook
Topic: SendIpcMessage failing in some cases (Reproduceable)
Replies: 3
Views: 3750

SendIpcMessage failing in some cases (Reproduceable)

Hi Madshi, Our team just found a little strange behavior on SendIpcMessage functionality. Our service is creating IPC Queues for doing some actions depending on some events coming from our EXE. The problem happens when sending an IPC with no buffer and size. Just like SendIpcMessage( 'ReloadSettings...
by nildo
Wed May 27, 2009 11:19 am
Forum: madCodeHook
Topic: How can I hook Copy/Move Operation In VISTA?
Replies: 8
Views: 10617

You need to hook CoCreateInstance in order to hook the interface IFileOperation, which is used by Vista. Take a look at MSDN for IFileOperation and you'll find out which functions on this interface to hook.

Bests
by nildo
Sat Feb 14, 2009 12:37 am
Forum: madCodeHook
Topic: CoCreateInstance hook
Replies: 6
Views: 8852

I'll post a new thread about a new topic, sorry.
by nildo
Fri Feb 13, 2009 5:42 pm
Forum: madCodeHook
Topic: CoCreateInstance hook
Replies: 6
Views: 8852

Great Madshi. This worked perfectly. Any idea upon the "MSFCT.blablabla"?

I heard this happens with Ms Detours as well. Maybe it's not a problem with MadCodeHook but on some strange windows behavior.
by nildo
Fri Feb 13, 2009 3:14 pm
Forum: madCodeHook
Topic: CoCreateInstance hook
Replies: 6
Views: 8852

Interfaces in parameters can be tricky, because Delphi's automated reference counting. Try this: var CoCreateInstance_NP : function (clsid, unkOuter, dwClsContext, iid, pv: dword) : dword; stdcall; function CoCreateInstance_CB(clsid, unkOuter, dwClsContext, iid, pv: dword) : dword; stdcall; begin /...
by nildo
Wed Feb 11, 2009 8:12 pm
Forum: madCodeHook
Topic: CoCreateInstance hook
Replies: 6
Views: 8852

PS.: The error always always comes from inside "quartz.dll", it's probably a directX DLL.

So, any other program using this DLL will tend to fail, Pandion (an instant messenger) causes the same fault, on the same DLL.
by nildo
Wed Feb 11, 2009 8:06 pm
Forum: madCodeHook
Topic: can't seem to hook NtCreateProcess
Replies: 10
Views: 8519

ShellExecute(Ex) internally calls CreateProcess, as far as I remember. So I don't really see the need to hook ShellExecute separately, unless you need the added parameters/control. But even if you do need to hook ShellExecute(Ex), I don't really see a reason for why it should stop processes from be...