Search found 1064 matches

by iconic
Sat Feb 24, 2024 1:23 am
Forum: madExcept
Topic: Application crashes when generating leak reports
Replies: 20
Views: 23972

Re: Application crashes when generating leak reports

I do call GetWindowText(), though, which apparently calls SendMessage Sure does :D It's a super thin wrapper around SendMessage(hWnd, WM_GETTEXT...); You can call InternalGetWindowText() instead (if you need it), there is no message passing at all. Instead, a direct syscall is made to the Win32k dr...
by iconic
Sat Jan 27, 2024 11:12 pm
Forum: madCodeHook
Topic: help! Do not injection (RESOLVED)
Replies: 16
Views: 2388

Re: help! Do not injection

@kuaaan,

Please let us know if your issue is resolved so we can close this thread, thanks!

--Iconic
by iconic
Wed Jan 24, 2024 9:34 am
Forum: madCodeHook
Topic: help! Do not injection (RESOLVED)
Replies: 16
Views: 2388

Re: help! Do not injection

if drvCfg.Magic2[1] = $12345678 then maxKeySize := 260 else if drvCfg.Magic2[1] = $12345679 then // unavail on OLD builds maxKeySize := 516; That's what caused the issue in my tests during x-comparison (older to latest) --Iconic
by iconic
Wed Jan 24, 2024 9:07 am
Forum: madCodeHook
Topic: help! Do not injection (RESOLVED)
Replies: 16
Views: 2388

Re: help! Do not injection

Hello, Ran a quick test myself with your exact binaries and the latest madConfigDrv tool worked fine here, no warnings/errors (hash of the driver changed accordingly, too) - Your "older" binary version of madConfigDrv.exe failed with the same error you are experiencing on my end. It all co...
by iconic
Tue Jan 23, 2024 11:19 pm
Forum: madCodeHook
Topic: help! Do not injection (RESOLVED)
Replies: 16
Views: 2388

Re: help! Do not injection

I've personally never encountered this problem with any version of madConfigDrv tool, however I use the "old" and proven way without the -cert parameter. Like Madshi said previously, it's much less flexible in case of changes to a binary, however (as Madshi noted) Lastly, does this only ha...
by iconic
Tue Jan 02, 2024 4:05 am
Forum: fun talk
Topic: Happy New Year!
Replies: 21
Views: 137543

Re: Happy New Year!

Happy New Year and best wishes for 2024 to everyone on the forum! :redBalloon: :greenBalloon: :blueBalloon:

--Iconic
by iconic
Wed Nov 29, 2023 8:17 pm
Forum: madCodeHook
Topic: [question] error code 31..
Replies: 3
Views: 32784

Re: [question] error code 31..

@jgh0721 Thanks for letting us know what your resolution was, it helps others on the forum too. As far as Windows OS is concerned... some Win32 API will normalize separators such as a / instead of a \ but other APIs may not (especially some native API). Sanitization and normalization is expected to ...
by iconic
Sun Oct 22, 2023 2:38 pm
Forum: madExcept
Topic: MadExcept not intergrating into applications
Replies: 6
Views: 13830

Re: MadExcept not intergrating into applications

Does the same thing happen after a clean uninstall and reinstall?

--Iconic
by iconic
Wed Sep 27, 2023 1:10 am
Forum: madExcept
Topic: What Delphi versions are supported?
Replies: 3
Views: 8355

Re: What Delphi versions are supported?

Delphi 7 was added to madExcept at the end of 2002 (not long after D7 was released), it works fine for Delphi 7 last I checked. Delphi 7 is also only 32-bit so eventually you may want to upgrade your IDE/Compiler. As far as your error and file access, ensure that the file actually exists before acce...
by iconic
Fri Aug 25, 2023 12:11 am
Forum: madExcept
Topic: Hiding a leak
Replies: 3
Views: 8967

Re: Hiding a leak

Hello,

The information is available for you to parse yourself after it's POSTed, after the info is collected. So yes, you'd need to do such a specific task of (parsing out the information) afterwards to alter the report info.

--Iconic
by iconic
Fri Aug 18, 2023 6:30 pm
Forum: madCodeHook
Topic: code not interceptable
Replies: 4
Views: 38620

Re: code not interceptable

I've answered a similar question here a few years ago involving the same returned error code and it was also involving interface hooking. I recommended the OP replace the virtual method address directly in the vTable/VMT and it worked fine for him. Please see http://forum.madshi.net/viewtopic.php?f=...
by iconic
Fri Aug 18, 2023 3:04 am
Forum: madCodeHook
Topic: code not interceptable
Replies: 4
Views: 38620

Re: code not interceptable

What API are you hooking in PhotosApp.exe on Windows 11 and is your project code in Delphi or c/c++? The main 2 or 3 things I can think of off the top of my head are the code design does not allow for disassembly that allows for this, it might be prone to a crash or too short, and the 2nd thing I ca...
by iconic
Sat Aug 12, 2023 8:28 pm
Forum: madCodeHook
Topic: Cannot load driver in safe mode
Replies: 9
Views: 23035

Re: Cannot load driver in safe mode

I've tested the print monitor driver that comes with the demo and is pre-signed by Madshi in Safe Mode. I was only able to load the driver in Safe Mode after adding the proper entries to SafeBoot key and disabling SecureBoot. When SecureBoot was enabled and test signing was off it failed unfortunate...
by iconic
Fri Aug 11, 2023 10:55 pm
Forum: madCodeHook
Topic: Cannot load driver in safe mode
Replies: 9
Views: 23035

Re: Cannot load driver in safe mode

Quick update, I've just run a couple of tests on Windows 10 Pro 22H2 x64 and a couple of standard drivers (not function or filter drivers, just basic) loaded fine for me in SafeMode even with SecureBoot enabled. I also checked if the driver was *truly* loaded and it was, the product worked as expect...
by iconic
Fri Aug 11, 2023 2:16 am
Forum: madCodeHook
Topic: Cannot load driver in safe mode
Replies: 9
Views: 23035

Re: Cannot load driver in safe mode

Your entries in the Registry seem ok to me after looking at them. It may be worth deleting the "Start Type" still present in your entry. If this is a newer Windows "Safe Boot" issue then clearly other 3rd-party drivers are also affected. On Windows 7 all works fine which usually ...