Click here to Skip to main content

C / C++ / MFC

Re: Exe signature bytes

Gary R. Wheeler21-Nov-05 2:03

Gary R. Wheeler

21-Nov-05 2:03

What are you trying to accomplish by modifying an EXE directly?

I can't think of a valid reason for doing so, especially wanting to modify the entry point. Your post (and the previous one) sounds like you want help writing a virus.

Software Zen: delete this;

Re: Exe signature bytes

zooley21-Nov-05 3:00

21-Nov-05 3:00

I want to write a tool like PEid's PE signature viewer. A tool for compiler detection (by signature bytes).

Re: Exe signature bytes

David Crow21-Nov-05 3:51

21-Nov-05 3:51

Does this tool detect the compiler or the linker?

"Take only what you need and leave the land as you found it." - Native American Proverb

Re: Exe signature bytes

zooley21-Nov-05 19:20

21-Nov-05 19:20

this tool will try to detect the compiler (and the cryptor or exe modifier)

Re: Exe signature bytes

David Crow22-Nov-05 3:02

22-Nov-05 3:02

I know the linker writes information to the EXE that can be retrieved, but are you sure that the compiler does too?

"Take only what you need and leave the land as you found it." - Native American Proverb

Re: Exe signature bytes

zooley22-Nov-05 19:51

22-Nov-05 19:51

I only know that every exe has a signature bytes at the entrypoint of the exe. (i mean that the first 128 bytes at the entrypoint are the signature bytes, they help to identify the compliler). And these signature bytes are modified by the protectors, packers.

Re: Exe signature bytes

David Crow21-Nov-05 3:43

21-Nov-05 3:43

zooley wrote:
Can anybody tell me how can i acces the first bytes at the entrypoint of an exe.

HANDLE hFile = CreateFile(..., GENERIC_READ, FILE_SHARE_READ, ...);
DWORD dwRead;
BYTE byte1, byte2;
ReadFile(hFile, &byte1, 1, &dwRead, NULL);
ReadFile(hFile, &byte2, 1, &dwRead, NULL);
...
CloseHandle(hFile);

zooley wrote:
...but i don't know how i can translate the entrypoint to fileoffset...

What exactly do you mean by this?

"Take only what you need and leave the land as you found it." - Native American Proverb

Re: Exe signature bytes

zooley21-Nov-05 20:00

21-Nov-05 20:00

Any suugestions all welkomed. Thanx!

Re: Exe signature bytes

David Crow22-Nov-05 2:59

22-Nov-05 2:59

zooley wrote:
Any suugestions all welkomed.

What's wrong with the one I offered?

"Take only what you need and leave the land as you found it." - Native American Proverb

Re: Exe signature bytes

zooley22-Nov-05 19:52

22-Nov-05 19:52

it is good, thanx for it.

winsock.h problem

newbie534520-Nov-05 20:09

20-Nov-05 20:09

I am trying to incorporate headers from one program into another. The host program compiles fine until I add my stdafx.h which includes:

#include afxwin.h // MFC core and standard components
#include afxext.h // MFC extensions
#include afxdisp.h // MFC Automation classes
#include afxdtctl.h // MFC support for Internet Explorer 4 Common Controls
#ifndef _AFX_NO_AFXCMN_SUPPORT
#include afxcmn.h
//(syntax edited for posting)

it then generates errors such as these in which there seems to be an ambiguity between winsock.h and winsock2.h:

c:\Documents and Settings\Brenaman\Desktop\UAV Simulator\use\SourceCode\use_ios\Globals\globals_socket_ext.h(13): error C2146: syntax error : missing ';' before identifier 'socketData'

c:\Documents and Settings\Brenaman\Desktop\UAV Simulator\use\SourceCode\use_ios\Globals\typedefs.h(41): error C2501: 'gameport::capability' : missing storage-class or type specifiers

c:\Documents and Settings\Brenaman\Desktop\UAV Simulator\use\SourceCode\use_ios\Globals\globals_socket_ext.h(15): error C2501: 'recvSockAddr' : missing storage-class or type specifiers

I've tried various things:

#define _WINSOCKAPI_ in various places to disinclude winsock.h in windows.h.
Editing windows.h to include winsock2 instead of winsock.
Various #include sequences.

Thank you in advance for any help.

- Chris

Re: winsock.h problem

vikas amin20-Nov-05 22:47

20-Nov-05 22:47

Did u try changing the seqence of the include fine
i also faced the same problem with the socket file,
i dont remeber what i did to solve the problem but
the stdafx if defined before the winsock header file
I have declared the Objects of winsock as global variables.
Cool | :cool:

Cool | :cool:

Vikas Amin
Embin Technology
Bombay
vikas.amin@embin.com

Re: winsock.h problem

Gary R. Wheeler21-Nov-05 2:09

Gary R. Wheeler

21-Nov-05 2:09

As a rule, you don't #include stdafx.h in other .h files; you just make it the first #include in your .cpp files.

DON'T modify windows.h. Ever. Millions of people use it, as-is, perfectly successfully without editting it.

Take a look at the winsock samples to see what you're doing wrong.

Software Zen: delete this;

VC++ 8 - redistributable DLLs

Tal S.20-Nov-05 20:05

20-Nov-05 20:05

Do you know where to locate redistributable DLL of VC++ 8 (nov 2005)?

(CRT and MFC)

I tried in system32, but the application is not running.

Thanks.

Re: VC++ 8 - redistributable DLLs

Mike Dimmick21-Nov-05 7:32

21-Nov-05 7:32

Read Visual C++ Libraries as Side-by-Side Shared Assemblies[^].

Stability. What an interesting concept. -- Chris Maunder

Re: VC++ 8 - redistributable DLLs

Sheng Jiang 蒋晟22-Nov-05 10:50

Sheng Jiang 蒋晟

22-Nov-05 10:50

see http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=127179&SiteID=1[^]

My blogs:

http://blog.joycode.com/jiangsheng
http://blog.csdn.net/jiangsheng
http://bloglines.com/public/jiangsheng

Command what is yours
Conquer what is not
---Kane

How to remove or ignore a windows 2003 dialog ?

Amarelia20-Nov-05 19:49

20-Nov-05 19:49

Hello Friends

I have Windows 2003 Server Installed on my Server. Whenever my server goes off or electricity problem and server gets restarted automatically, at the end it asks for the reason why server was rebotted giving one dialog for writing one comment.

I want to overcome this problem, so is there any setting or any way such as to write some service or something which automatically removes that dialog or I don't get dialog or something else....

Any solution is most welcomed.....

I have written this question in VC++ section as I think using VC++ it might be possible to kill that dialog or like that.......

Thanks in advance.

Amarelia Maehsh
Gujarat
India

Re: How to remove or ignore a windows 2003 dialog ?

vikas amin20-Nov-05 22:53

20-Nov-05 22:53

U can create a programe to get the handle
of the dialogbox window . By using this
handle u can close the window.
How to identify the window is by using the
window text.
This will work fine . Hope so u get it ....
Cool | :cool:

Cool | :cool:

.......

Vikas Amin
Embin Technology
Bombay
vikas.amin@embin.com

Re: How to remove or ignore a windows 2003 dialog ?

Gary R. Wheeler21-Nov-05 2:24

Gary R. Wheeler

21-Nov-05 2:24

Try here[^] and here[^].

Software Zen: delete this;

Retriving info in form of UNICODE

anilksingh20-Nov-05 18:50

20-Nov-05 18:50

how to read the data from editbox in form of UNICODE

Re: Retriving info in form of UNICODE

ThatsAlok21-Nov-05 1:35

21-Nov-05 1:35

Humm.. call Function GetWindowTextW(...);( I.e. wide character) for reteriving text from the edit box

"Opinions are neither right nor wrong. I cannot change your opinion. I can, however, change what influences your opinion." - David Crow

cheers,
Alok Gupta
VC Forum Q&A :- I/ IV

Identities in Outlook Express

rajeevktripathi20-Nov-05 18:49

rajeevktripathi

20-Nov-05 18:49

Hi all

Please tell me that how can I find all the identities in Outlook Express programatically, and find all the folders for corresponding identity.

Please help.

Thanks & Regrds.
Edit/Delete Message

Re: Identities in Outlook Express

ThatsAlok20-Nov-05 22:00

20-Nov-05 22:00

look for this link
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/outlookexpress/oe/reference/oe_accounts_ref_entry.asp[^]

"Opinions are neither right nor wrong. I cannot change your opinion. I can, however, change what influences your opinion." - David Crow

cheers,
Alok Gupta
VC Forum Q&A :- I/ IV

Re: Identities in Outlook Express

rajeevktripathi20-Nov-05 23:43

rajeevktripathi

20-Nov-05 23:43

Hi I went through to the given link and using following code

<br />
IImnAccountManager *m_pAccountManager;<br />
HRESULT hr = CoCreateInstance(CLSID_ImnAccountManager, NULL, CLSCTX_SERVER, <br />
									IID_IImnAccountManager, (LPVOID*) &m_pAccountManager);<br />
  if(FAILED(hr)) <br />
  {<br />
		MessageBox(_T("Error creating IImnAccountManager."), _T("Demo Error"));<br />
		EndDialog(1);<br />
		return FALSE;<br />
  }<br />
<br />
<br />
  <br />
  m_pAccountManager->Init(NULL);<br />
  <br />
<br />
  ACCTTYPE  acct;<br />
  ULONG     ulAccounts;<br />
  m_pAccountManager->GetAccountCount(acct,&ulAccounts);<br />

but after last line it gives error
"Unhandled Exception in Demo.exe(MSOEACCT.DLL)0xC0000005 Access Violation."

So please tell me that how can I remove this error.

Thanks

FlyingDancer20-Nov-05 18:38

20-Nov-05 18:38

After stroking SHIFT key five times, one dialog pops up to notify if to enable the sticky keys.
Do you know some way to disalbe this function and let it not shown when stroking the SHIFT key?
Thanks in advance!

General News Suggestion Question Bug Answer Joke Praise Rant Admin

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.