Comments for ~magog/public

Comment on Loading a DLL from memory by Exécuter une application en mémoire comme un nul(l) | Pirater comme un nul(l)

Sun, 07 Apr 2013 06:44:18 +0000

[...] http://www.joachim-bauch.de/tutorials/loading-a-dll-from-memory/ [...]

Comment on Loading a DLL from memory by Exécuter une application en mémoire comme un nul(l) | Pirater comme un nul(l)

Sun, 07 Apr 2013 06:44:16 +0000

[...] http://www.joachim-bauch.de/tutorials/loading-a-dll-from-memory/ [...]

Comment on Loading a DLL from memory by Reflective DLL Injection with PowerShell | clymb3r

Reflective DLL Injection with PowerShell | clymb3r — Sat, 06 Apr 2013 06:26:37 +0000

[...] http://www.joachim-bauch.de/tutorials/loading-a-dll-from-memory/ [...]

Comment on Loading a DLL from memory by Entrada Aviso

Entrada Aviso — Thu, 28 Mar 2013 14:09:50 +0000

Hello alright ..
Dear friends since ja wanna thank not only more praise this MemoryModule’s great use in everything that I can use very good. I finally just a problem in version 0.0.1 creating the dll in memory using an executable. funcitona EXE perfect but when I try to create a dll from another dll error and dynamic occurs following line (l_successfull: l_DllEntry = (Cardinal (l_code) DLL_PROCESS_ATTACH, nil)) within the function BTMemoryLoadLibary
execpt and he comes calling BTMemoryFreeLibrary (l_result); … Well that and my problem would be very grateful if you could ever help me …. from already thank you dear friends await response.

Comment on About me by babydream

babydream — Wed, 20 Feb 2013 07:13:47 +0000

hi,JY.
your idea about the load dll in momery is very interesting,also it can work compatible with dll,but not so good with exe,i konw it not so easy to execute a .exe from memory buffer,ie tls、hook and imagebase relaction confuse me the most,writeprocess sincerely work well,but is there a way like loading dll from memory to execute a .exe file?

Comment on PyLZMA by kbec

kbec — Thu, 14 Feb 2013 18:16:00 +0000

Is there a chance to get py7ziplib.Archive7z works with archive’s subdirs on Windows? I got “IndexError: list index out of range” if opened archive contains directories.

Comment on Loading a DLL from memory by Ann

Ann — Mon, 04 Feb 2013 16:10:27 +0000

if i add this in MFC project – it doesnt work.

Please help me!

link to the my project(standart MFCdialog + 2 files of MemoryModule):
https://docs.google.com/file/d/0B5vKtHYfk6o5WFh5MTBlYVBYOEE/edit?usp=sharing

Comment on Loading a DLL from memory by Hardware ID Licensing System Techniques | Programming for Fun

Hardware ID Licensing System Techniques | Programming for Fun — Tue, 25 Dec 2012 10:57:17 +0000

[...] Memory Module – http://www.joachim-bauch.de/tutorials/loading-a-dll-from-memory/ Share this:TwitterFacebookLike this:LikeBe the first to like this. This entry was posted in [...]

Comment on PyLZMA by Hamish

Hamish — Fri, 21 Dec 2012 16:37:40 +0000

Hi Joachim,

thanks very much for your port of LZMA – I find it very useful for filtering archives of network data. However, I have a problem decompressing archives which are generated incrementally adding two or more files simultaneously. I have found that the assumption in Archive7z.__init__ that “every file has it’s own folder” does not hold. I appreciate this may be a cause of “Don’t Do That!”. I am sure I should raise this on your bugzilla, but you do not seem to have a category for py7zlib bugs?

In order to work around the problem I found that (1) SubstreamsInfo.__init__ contained a bug:
Where id == PROPERTY_SIZE, the sum must be set to zero before the inner loop (otherwise the total is carried across and incorrect sizes (often negative!) result.

(2) In order to more easily process the unpacking info, I changed the loop and its preamble in Archive7z.__init__ to:

self.solid = packinfo.numstreams == 1
if self.solid:
# the files are stored in substreams
if hasattr(subinfo, ‘unpacksizes’):
unpacksizes = subinfo.unpacksizes
else:
unpacksizes = [x.unpacksizes[0] for x in folders]
else:
# check every file has its own folder with compressed data
if unpackinfo.numfolders == files.numfiles:
unpacksizes = [x.unpacksizes[0] for x in folders]
else:
unpacksizes = subinfo.unpacksizes

src_pos = self.afterheader
maxsize = (self.solid and packinfo.packsizes[0]) or None

idx2 = 0
for fidx in range(unpackinfo.numfolders):
folder = folders[fidx]

pos = 0
old_src_pos = src_pos
numps = subinfo.numunpackstreams[fidx]
for ssidx in range(numps):
info = files.files[idx2]
if info['emptystream']:
continue

info['compressed'] = (not self.solid and packsizes[fidx]) or None
filesize = unpacksizes[idx2]
info['uncompressed'] = filesize
file = ArchiveFile(info, pos, src_pos,
# unpacksizes[fidx],
filesize,
folder, self, maxsize=maxsize)
if subinfo.digestsdefined[idx2]:
file.digest = subinfo.digests[idx2]
self.files.append(file)
pos += unpacksizes[idx2]

idx2 += 1

src_pos = old_src_pos
if not self.solid:
src_pos += packsizes[fidx]

My apologies for the length of this post, and any poor code formatting. I should also add that I have not conducted exhastive testing on my workaround – it just works for the kind of archives I am encoundering.

Regards,
Hamish

Comment on Loading a DLL from memory by Justin Arndt

Justin Arndt — Thu, 29 Nov 2012 11:25:27 +0000

I ran into the same MFC issue, is there a workaround for that yet??