cobein

cobein

36p

47 comments posted · 0 followers · following 0

71 weeks ago @ AdvanceVB - System Call Dispatcher · 0 replies · +1 points

Nice, Ill try to fix it, mine is gone too =/

71 weeks ago @ AdvanceVB - System Call Dispatcher · 1 reply · +1 points

yeah they do differ from OS to OS and maybe in SPs too. Karcrack is your account fine? I move the blog and Im not sure if its still working fine.

72 weeks ago @ AdvanceVB - TLB and IDL · 0 replies · +1 points

Si, el compilador simplemente agrega lo que se este utilizando, APIs , estructuras, constantes, ect.

72 weeks ago @ AdvanceVB - Comments · 0 replies · +1 points

Yeah, we are having problems with the host... looks like is always the DNS so Im moving it to another server right now, should be up on the new host soon.

74 weeks ago @ AdvanceVB - mZombieInvoke - Native... · 0 replies · +1 points

If you are using the tlb you have to remove all the declarations from the top (APIs structures and so on)

74 weeks ago @ AdvanceVB - SystemProcessesAndThre... · 0 replies · +1 points

Clean version:

Public Function RetrieveProcesses() As PROCESS()
Dim bvSPI(17) As Long 'As SYSTEM_PROCESS_INFORMATION
Dim bvTmp() As PROCESS
Dim bvBuffer() As Byte
Dim lPos As Long
Dim lSize As Long

'// Resize buffer to struct size + 4
ReDim bvBuffer(22)
'// Get buffer size
Call NtQuerySystemInformation(SystemProcessesAndThreadsInformation, bvBuffer(0), 22, lSize)
'// Make sure size id not 0
If lSize = 0 Then Exit Function
'// Resize buffer
ReDim bvBuffer(lSize)
'//Get procs info
Call NtQuerySystemInformation(SystemProcessesAndThreadsInformation, bvBuffer(0), lSize, lSize)

lPos = VarPtr(bvBuffer(0))

ReDim bvTmp(0)
Do
Call RtlMoveMemory(bvSPI(0), ByVal lPos, 18 * 4)
With bvTmp(UBound(bvTmp))
.lPID = bvSPI(17)
.sName = ReadUStr(bvSPI(15))
End With
lPos = lPos + bvSPI(0)
If bvSPI(0) = 0 Then Exit Do
ReDim Preserve bvTmp(UBound(bvTmp) + 1)
Loop

RetrieveProcesses = bvTmp
Erase bvBuffer
End Function

74 weeks ago @ AdvanceVB - SystemProcessesAndThre... · 1 reply · +1 points

A small mod to make it smaller. There are some things that can be removed but I cant right now.

Note: the buffer must be initialized to structure size + 4 if im not wrong I use 512 which is more than enough cause I dont have the actual structure with me right now.

cbBuffer = 512
ReDim bvBuffer(cbBuffer)
lRet = NtQuerySystemInformation(SystemProcessesAndThreadsInformation, bvBuffer(0), cbBuffer, lSize)
If lSize = 0 Then Exit Function
ReDim bvBuffer(lSize)
lRet = NtQuerySystemInformation(SystemProcessesAndThreadsInformation, bvBuffer(0), cbBuffer, lSize)
lPos = VarPtr(bvBuffer(0))

76 weeks ago @ AdvanceVB - Upgrading the blog (op... · 0 replies · +1 points

Yeah I know, but dont worry no matter what the blog is gonna stay the same way, Im not changing it. This is gonna be totally separated IF I decide to do it.

76 weeks ago @ AdvanceVB - Upgrading the blog (op... · 1 reply · +2 points

Karcrack has full control over the blog ;)

76 weeks ago @ AdvanceVB - Upgrading the blog (op... · 0 replies · +1 points

Well, my idea is not to destroy the blog at all, its simple, easy to maintain and fairly clean from skidd comments and stuff like that. On the other hand moving the content will be too much time for me so thats out of the equation.

My idea was to "expand" the content range a lil bit and add some extra stuff to make it more organized and easy to use.

Well no matter what its still an idea and we will see what happen.