Re: [twsocket] breakpoint in NTDll
Hello Arno, procedure PatchINT3; This procedure works great. But something is strange. If I run this in a separate application then it does not work. However as far as I know a DLL is loaded only once in memory. So then it should work also if I run this in a separate app and let the other applicaiton run like this: eg a console app: begin PatchInt3; ReadLn(); end. --- Rgds, Wilfried [TeamICS] http://www.overbyte.be/eng/overbyte/teamics.html http://www.mestdagh.biz -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] breakpoint in NTDll
Wilfried Mestdagh wrote: Hello Arno, procedure PatchINT3; This procedure works great. But something is strange. If I run this in a separate application then it does not work. However as far as I know a DLL is loaded only once in memory. So then it should work also if I run this in a separate app I don't think so, each process uses its private, virtual address space and WriteProcessMemory() writes to the virtual memory of the process specified by parameter hProcess. -- Arno Garrels and let the other applicaiton run like this: eg a console app: begin PatchInt3; ReadLn(); end. --- Rgds, Wilfried [TeamICS] http://www.overbyte.be/eng/overbyte/teamics.html http://www.mestdagh.biz -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] boundary, webmail and thmlsmtpcli
jimi wrote: Unfortunately i won't be able to test that before monday (at home i don't have any delphi), but that'll be the first thing I'll do. Then I'll tell you what i get. I just updated the ICS V7 repository. (More details about how to get access to the ICS repositories can be found on the ICS website). Log: Changed MIME part generation of THtlmSmtpCli when files are attached (beside in-line images). Added Password and Username edits to the HTML demo. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] breakpoint in NTDll
Arno Garrels wrote: Wilfried Mestdagh wrote: Hello Arno, procedure PatchINT3; This procedure works great. But something is strange. If I run this in a separate application then it does not work. However as far as I know a DLL is loaded only once in memory. So then it should work also if I run this in a separate app I don't think so, each process uses its private, virtual address space and WriteProcessMemory() writes to the virtual memory of the process specified by parameter hProcess. You could change it to take a process handle, PatchINT3(hProc: THandle). The entry points should be the same in all processes, AFAIR (it's a long time ago when I wrote my last virus ;-). -- Arno Garrels -- Arno Garrels and let the other applicaiton run like this: eg a console app: begin PatchInt3; ReadLn(); end. --- Rgds, Wilfried [TeamICS] http://www.overbyte.be/eng/overbyte/teamics.html http://www.mestdagh.biz -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
