Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 1562

C++ is a statically typed, free-form, multi-paradigm, compiled, general-purpose programming language. It is considered an intermediate level language.

3
votes
Microsoft Detours makes this very easy. You'd effectively write the following code (to be safe, you'd want to make other calls such as DetourUpdateThread() as well): DetourTransactionBegin(); DetourA …
answered Jul 14 '13 by Jason Geffner
3
votes
IMAGE_SECTION_HEADER *sectionHeader = (IMAGE_SECTION_HEADER*)((DWORD)ntHeader+sizeof(IMAGE_NT_HEADERS)); The line above is incorrect. It should be: IMAGE_SECTION_HEADER *sectionHeader = (IMAGE_SECT …
answered Sep 23 '14 by Jason Geffner
3
votes
Yes, you could add an Export Table to the original executable, with named symbols (which you define) pointing to the addresses for those functions/globals/etc. Your DLL could then import those functi …
answered Sep 12 '14 by Jason Geffner
0
votes
It could be a method that at a high-level is intended to return a covariant object pointer.
answered Mar 8 '16 by Jason Geffner
6
votes
As discussed in https://reverseengineering.stackexchange.com/a/5957/1562, it's compiler-dependent (different compilers will generate different machine code and data structures). However, you may want …
answered Oct 8 '15 by Jason Geffner
2
votes
At one particular instance it showed a debug error saying: "The process was not able to resume execution because the ESP value was changed", or something similar. ... typedef void(__cdecl …
answered Dec 20 '14 by Jason Geffner
5
votes
How do I find the base offset of process (I assume I can do in the DLL using something like GetModuleHandle("HackMe.exe"))? A process doesn't have a base offset; I believe you mean the base …
answered Mar 22 '16 by Jason Geffner
0
votes
Based on http://pastebin.com/qDMP0yz0, you have enough space to make this work. The easiest solution is to patch your target executable such that the data from Virtual Address 0x004BAC10 through 0x00 …
answered Feb 11 '16 by Jason Geffner
2
votes
While it's possible for something to be compiled with a compiler other than MSVC and "manually" import from an MSVC DLL, it's extremely unlikely and uncommon. Chances are, yes, if you see something i …
answered Jul 29 '14 by Jason Geffner
4
votes
My first recommendation would be to contact the vendor and ask them your questions. You paid for the product and its SDK, so if the latter is not usable, they should offer support to you. As for moni …
answered Jun 10 '15 by Jason Geffner
4
votes
The Android Dynamic Binary Instrumentation Toolkit (adbi) should allow you to do what you need to do. Simple binary instrumentation toolkit for Android ARM + Thumb. Instrumentation is based o …
answered May 22 '14 by Jason Geffner
4
votes
EDIT: The answer below is specific to PE files, which doesn't answer the question above now that @Achilles specified that his question is in regard to ELF files. Given that you have the source code a …
answered Jul 2 '14 by Jason Geffner
13
votes
All Hex-Rays macros are defined in <IDA directory>\plugins\defs.h. It's also available at https://github.com/nihilus/hexrays_tools/blob/master/code/defs.h For BYTE3(x): ... #define BYTEn(x, n) (*( …
answered Aug 18 '13 by Jason Geffner
5
votes
While this answer is certainly not true in all situations, the answer for which your teacher is probably looking: Local variables are in the form [EBP - ...] Passed arguments are in the form [EBP + …
answered Apr 12 '13 by Jason Geffner
1
vote
I'm currently using Visual Studio 2013 to inject C++ code which works fine but being able to edit the original assembly code without having to translate it to C++ first would be a nice improvem …
answered Sep 6 '14 by Jason Geffner

15 30 50 per page