Can anyone help with modifying this DLL

Everything else that doesn't fall into one of the other PB categories.
localmotion34
Enthusiast
Enthusiast
Posts: 665
Joined: Fri Sep 12, 2003 10:40 pm
Location: Tallahassee, Florida

Can anyone help with modifying this DLL

Post by localmotion34 »

so after woring with SnapperHelper.dll for a while, a huge bug has presented itself.

if you enable the tracking/zoom window, and call the Getregionimage or getwindow image function with certain types of windows open, the zoom window refuses to repaint itself.

The author has dissappeard, and no source is available anymore. So all i have to work with is the DLL itself.

What i want to do is stop the user from being able to show the popup menu with a right click that shows the options, EPSECIALY the "Toggle help" menuitem that displays this terrible window.

The DLL is free and the license states we are able to use it for anything. When the source WAS available, you were free to modify it in any way. So modding the DLL itself isnt a violation.

if you look at the example i provided on using the DLL and run it, when you call the functuons and right click on the screen, the menu pops up.

this is what i want to disable. I can then set the options through registry keys, and choose which ones i want the end user to be able to set.

i do not want this tracking window to be diplayed at all.

I know some of you out there are good reversers, so can you help me maybe nop out a few bytes to stop this menu from being diplayed, or help remove the menu from the DLL?

http://www.penguinbyte.com/apps/pbwebst ... erDemo.zip

Code: Select all

!.WHILE status != dwPassedOut
! Invoke AllocateDrink, dwBeerAmount
!MOV Mug, Beer
!Invoke Drink, Mug, dwBeerAmount
!.endw
jack
Addict
Addict
Posts: 1358
Joined: Fri Apr 25, 2003 11:10 pm

Post by jack »

here's a tutorial but it's C++, someone might be able to translate it to PB
http://www.codeproject.com/dll/DLL_Inje ... torial.asp
KarLKoX
Enthusiast
Enthusiast
Posts: 681
Joined: Mon Oct 06, 2003 7:13 pm
Location: France
Contact:

Post by KarLKoX »

"Qui baise trop bouffe un poil." P. Desproges

http://karlkox.blogspot.com/
thefool
Always Here
Always Here
Posts: 5875
Joined: Sat Aug 30, 2003 5:58 pm
Location: Denmark

Post by thefool »

LocalMotion i have been looking at the dll in ollydbg a little, but even though i have a little experience in reversing exe's, DLLs are new for me. So whenever i want to disable the menu, it seems like the dll wants to catch some info from it or so and i am too lazy to disable it all at the moment.

Now what you can do now:
http://www.angusj.com/resourcehacker/

Simply load the dll file and edit the menu's. This is a safe method; and this way you can have the "Abort capture" menu item enabled; or any other you might like :)

If you still want the menu completely removed, then i need to have another go with olly. i have an idea of how to do it; but i don't want to spend my time if this is good enough for you.
localmotion34
Enthusiast
Enthusiast
Posts: 665
Joined: Fri Sep 12, 2003 10:40 pm
Location: Tallahassee, Florida

Post by localmotion34 »

@TheFool

Already tried editing the menus in Resource Tuner. SOMEHOW, the DLL re-modifies its menus at runtime, and regenerates the missing menu items.

I think I need to trap the menu being shown. Somehow, between the both of us, we should be able to get rid of the #wm_rbutton down message processing in the DLL, or something else.

Code: Select all

!.WHILE status != dwPassedOut
! Invoke AllocateDrink, dwBeerAmount
!MOV Mug, Beer
!Invoke Drink, Mug, dwBeerAmount
!.endw
thefool
Always Here
Always Here
Posts: 5875
Joined: Sat Aug 30, 2003 5:58 pm
Location: Denmark

Post by thefool »

why does it do that? Here it works just fine!
localmotion34
Enthusiast
Enthusiast
Posts: 665
Joined: Fri Sep 12, 2003 10:40 pm
Location: Tallahassee, Florida

Post by localmotion34 »

can you post your modified DLL so i can test it out?

Code: Select all

!.WHILE status != dwPassedOut
! Invoke AllocateDrink, dwBeerAmount
!MOV Mug, Beer
!Invoke Drink, Mug, dwBeerAmount
!.endw
thefool
Always Here
Always Here
Posts: 5875
Joined: Sat Aug 30, 2003 5:58 pm
Location: Denmark

Post by thefool »

yep.

File:1->SnaperHelper.dll
Image
thefool
Always Here
Always Here
Posts: 5875
Joined: Sat Aug 30, 2003 5:58 pm
Location: Denmark

Post by thefool »

so, localmotion. did it work?
localmotion34
Enthusiast
Enthusiast
Posts: 665
Joined: Fri Sep 12, 2003 10:40 pm
Location: Tallahassee, Florida

Post by localmotion34 »

No. The "Toggle Help" Menu item was still there when calling the functions, and right clicking during screen capture.

Code: Select all

!.WHILE status != dwPassedOut
! Invoke AllocateDrink, dwBeerAmount
!MOV Mug, Beer
!Invoke Drink, Mug, dwBeerAmount
!.endw
thefool
Always Here
Always Here
Posts: 5875
Joined: Sat Aug 30, 2003 5:58 pm
Location: Denmark

Post by thefool »

this is pretty funny. It worked great here!
Post Reply