Log in

View Full Version : Control an application behavior

Zuk
August 14th, 2008, 12:34
Hello! I'm new to the rce world. I've been programming in C for a few years now, and I know a little bit of asm (which, I know, it's essential in rce)

I want to start by hacking a dummy program. Let's say the program shows a custom message box every hour and I want to make a dll, that when injected in the target program will show that custom message box.

Here is some pseudo-code of the dummy.exe:
Code:


if (CurrentTime.minutes == 00)

{

h=LoadDll("dummy.dll";

mb=GetProcAddress(h, "CustomMB";

mb("Hello world";

}



I know I need to get the CustomMB address in the dummy.exe memory, but how do I do that? :P

Feel free to direct me to any tutorial you feel I need to read.
I have ollydbg and if I steal my friends lappie I also have ida pro
Silver
August 14th, 2008, 12:44
Can you clarify what you mean? As per your pseudocode, if you can GetProcAddress on a function (CustomMB) then the function is exported, thus you already have the address of the function.
Zuk
August 14th, 2008, 13:12
Quote:
[Originally Posted by Silver;76545]Can you clarify what you mean? As per your pseudocode, if you can GetProcAddress on a function (CustomMB) then the function is exported, thus you already have the address of the function.


Sorry, my bad. That pseudo-code is from dummy.exe. I want to make dummy.exe call that function, I know it's exported but imagine that that function returns something important and accordingly to the return value dummy.exe sets some flag that's why I can't call that function from some other program.


Please let me know if this still sounds confusing
Zuk
August 14th, 2008, 17:48
After re-reading my previous posts and doing a second analysis, I came to the conclusion that what I said makes no sense.

Sorry
Silver
August 15th, 2008, 08:59
Heh, that quote nearly, just nearly replaced disa's in my sig
JMI
August 15th, 2008, 11:07
Silver:

You could use his disa's new "quote":

"spent $250 to drink in the freezing room on sunday"



Regards,