View previous topic :: View next topic |
Author |
Message |
manc Grandmaster Cheater
Reputation: 1
Joined: 16 Jun 2006 Posts: 551
|
Posted: Thu Feb 12, 2009 1:18 am Post subject: |
|
|
And you just call PostMessage? or is it a variant of it?
_________________
|
|
Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Thu Feb 12, 2009 9:03 am Post subject: |
|
|
Good work as always, Irwin! This will definitely come in handy.
_________________
8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
Back to top |
|
 |
slippppppppp Grandmaster Cheater
Reputation: 0
Joined: 08 Aug 2006 Posts: 929
|
Posted: Thu Feb 12, 2009 9:46 pm Post subject: |
|
|
very good, never thought of that
|
|
Back to top |
|
 |
HalfPrime Grandmaster Cheater
Reputation: 0
Joined: 12 Mar 2008 Posts: 532 Location: Right there...On your monitor
|
Posted: Fri Feb 13, 2009 12:34 am Post subject: |
|
|
But if it doesn't have the prologue and you only jump over 3 bytes, won't it try to execute the last 2 bytes of the hook?
_________________
|
|
Back to top |
|
 |
HalfPrime Grandmaster Cheater
Reputation: 0
Joined: 12 Mar 2008 Posts: 532 Location: Right there...On your monitor
|
Posted: Fri Feb 13, 2009 12:49 am Post subject: |
|
|
Would this allow trampolining for any start of a function even if it doesn't use mov ebp, esp, etc?
Code: | __declspec(naked) BOOL WINAPI _PostMessage(__in HWND hWnd, __in UINT Msg, __in WPARAM wParam, __in LPARAM lParam)
{
__asm {
//20 or so nops lol
jmp [ulPostMessage]
}
}
__inline BOOL InitializeTrampoline(void)
{
__try {
ulPostMessage = (ULONG_PTR)PostMessage;
do{
ulPostMessage += anArrayOfOpcodeLengths[*(BYTE*)PostMessage];}
while(ulPostMessage < (ULONG_PTR)PostMessage+5)
*(BYTE[ulPostMessage-(ULONG_PTR)PostMessage]*)_PostMessage = *(BYTE[ulPostMessage-(ULONG_PTR)PostMessage]*)(ULONG_PTR)PostMessage;
return TRUE;
}
__except(EXCEPTION_EXECUTE_HANDLER) {
return FALSE;
}
} |
_________________
|
|
Back to top |
|
 |
rapion124 Grandmaster Cheater Supreme
Reputation: 0
Joined: 25 Mar 2007 Posts: 1095
|
Posted: Fri Feb 13, 2009 1:47 pm Post subject: |
|
|
Can't you just make a function that disassembles first few bytes of the API and copy the appropriate number of bytes for the trampoline?
|
|
Back to top |
|
 |
nwongfeiying Grandmaster Cheater
Reputation: 2
Joined: 25 Jun 2007 Posts: 695
|
Posted: Sat Feb 14, 2009 5:52 pm Post subject: |
|
|
It's really weird how whenever Irwin creates something and posts it, the upload always has to have a homosexual description included no matter what it is.
|
|
Back to top |
|
 |
BanMe Master Cheater
Reputation: 0
Joined: 29 Nov 2005 Posts: 375 Location: Farmington NH, USA
|
|
Back to top |
|
 |
Aviar³ Grandmaster Cheater
Reputation: 50
Joined: 03 Jan 2008 Posts: 655 Location: Canada
|
Posted: Mon Mar 09, 2009 4:36 am Post subject: |
|
|
Thank you for the example, while I do not truly understand it, I have bookmarked it for later reference in hopes of one day successfully being able to implement/understand a trampoline.
_________________
This is the inception of deception, checking the depth of your perception.
 |
|
Back to top |
|
 |
khongminh9 How do I cheat?
Reputation: 0
Joined: 17 Dec 2007 Posts: 1
|
Posted: Sat Apr 04, 2009 4:54 am Post subject: |
|
|
@Irwin: File example.zip don't exist
can you reupload ???
thanks
|
|
Back to top |
|
 |
sponge I'm a spammer
Reputation: 1
Joined: 07 Nov 2006 Posts: 6009
|
Posted: Sat Apr 04, 2009 5:37 am Post subject: |
|
|
CEF has been hacked recently, all attachments are not available.
_________________
|
|
Back to top |
|
 |
Overload Master Cheater
Reputation: 0
Joined: 08 Feb 2008 Posts: 293
|
Posted: Sat Apr 04, 2009 2:02 pm Post subject: |
|
|
sponge wrote: | CEF has been hacked recently, all attachments are not available. | Figured.
Has someone made some kind of announcement yet?
_________________
Blog
Quote: | Rhys says:
you can be my maid
Rhys says:
ill buy you a french maid outfit
Tyler says:
Sounds good
Rhys says:
ill hold you to that |
|
|
Back to top |
|
 |
kitterz Grandmaster Cheater Supreme
Reputation: 0
Joined: 24 Dec 2007 Posts: 1268
|
Posted: Sat Apr 04, 2009 2:27 pm Post subject: |
|
|
Overload wrote: | sponge wrote: | CEF has been hacked recently, all attachments are not available. | Figured.
Has someone made some kind of announcement yet? |
Not officially.
_________________
|
|
Back to top |
|
 |
|