+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Coders Lounge (https://hackforums.net/forumdisplay.php?fid=5)
+---- Thread: [Assembly] Calling function (/showthread.php?tid=5824236)
Calling function - samuelrizzo - Apr 12, 2018
Hi everyone,
I'm delphi coder and I've never coded asm before
I was trying to call a function of an external software, the function decrypt some strings in delphi it may be like:
Quote:function Decrypt(str:string):string;stdcall;
In the asm i'm seeing the program pass the params like this:
Quote:mov eax,program.dll+6D278 { ["Wkd4c2FXNXFaV04wWldRbw**"] }
call program.dll+58C60
and sometimes like this:
Quote:lea edx,[ebp-48]
mov eax,progam.dll+6CB44 { ["TDJGMWRHOTNhVzQq"] }
call program.dll+58C60
"program.dll+58C60" is the function I want to call and get the string decrypted.
Can someone help me to do this?
RE: Calling function - Jochen_ - May 7, 2018
(Apr 12, 2018 04:24 PM)samuelrizzo Wrote: Hi everyone,
I'm delphi coder and I've never coded asm before
I was trying to call a function of an external software, the function decrypt some strings in delphi it may be like:
In the asm i'm seeing the program pass the params like this:
and sometimes like this:
"program.dll+58C60" is the function I want to call and get the string decrypted.
Can someone help me to do this?
Can you post more of your code ?
I might be able to help you..
RE: Calling function - HFDone - May 8, 2018
call program.dll+58C60
program.dll > dll base address
58C60 > offset 0x58C60
call dll base address + 0x58C60
RE: Calling function - spiderfruit - May 8, 2018
use CreateRemoteThread to call function remotely (its important to check the calling convention) you'll have to obtain a valid handle to the process, use OpenProcess.
or you can manipulate and use an existing thread (thread hijacking) but I'd suggest you sticking with my first suggestion ^
-spiderfruit