Shoutbox

lol.. and why would you want to know something like that hum?

quote:

---

Originally posted by Patchou
lol.. and why would you want to know something like that hum?

---

Load Plus! or maybe replace Plus! ?

Edit: I tried load using no params (void), and that seemed to work fine. The DLL is loaded, and confirmed by GetModuleHandle API. But I loaded it into my own program, not Messenger.
Here's my stupid VB6 code:

code:

---

Private Declare Function Initialize Lib "MsgPlusLive" ()
Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" _
  (ByVal lpModuleName As String) As Long
 
Private Sub Form_Load()
    Initialize
    MsgBox "Plus Loaded?"
    If GetModuleHandle("MsgPlusLive.dll") > 0 Then
        MsgBox "Plus is loaded!"
    End If
End Sub

---

I wrote it in VB6 because I'm using Visual Studio 2005 for C++, which takes like an half hour to start

quote:

---

Originally posted by Patchou
lol.. and why would you want to know something like that hum?

---

Wel... It's part of my evil plan to dominate the world through hipnotizing rays coming out of Msn Messenger.

LOL, no really... I figure if I can load it I'll get Plus! (Well... again ) Because right now I load the Dll's but Plus!'s stuff doesnt appear

I suppose I could load Plus!'s msimg32.dll and that would get it to work.

Did you try LoadLibrary API? That would probably not work either . But it's worth a try .

I don't think Patchou will give you the signature .

I got it! I got it!

Thanks vikke! I owe you a million! Now I can rest

Wow... this had really been nagging me. Back to real life now

---

quote:

---

Originally posted by vikke
Did you try LoadLibrary API? That would probably not work either . But it's worth a try .

I don't think Patchou will give you the signature .

---

What's so special about the signature? (guess I could always look at the assembly, take a few classes in reverse engineering lol)

Aaaanyway... Plus loads, menus, icons, everything I did as you suggested and tried calling Initialize() :

code:

---

// Initialize Plus (hopefully)
typedef VOID (* PLUS_Type)(VOID);
PLUS_Type Initialize_fn = (PLUS_Type) GetProcAddress( _PlusDll, "Initialize");
Initialize_fn();

---

Maybe I got it right by accident, who knows Oh, and sorry about the messy code, I'm still new to all this strange typedef's (and already started to hate LPCWSTR's)

quote:

---

Originally posted by muttantegg

quote:

---

Originally posted by vikke
Did you try LoadLibrary API? That would probably not work either . But it's worth a try .

I don't think Patchou will give you the signature .

---

What's so special about the signature? (guess I could always look at the assembly, take a few classes in reverse engineering lol)

---

You asked for it ?

quote:

---

Originally posted by muttantegg

code:

---

// Initialize Plus (hopefully)
typedef VOID (* PLUS_Type)(VOID);
PLUS_Type Initialize_fn = (PLUS_Type) GetProcAddress( _PlusDll, "Initialize");
Initialize_fn();

---

---

Good job, function pointers are not that hard , it's only about learning the technique!

All went well, until I tried hooking the resources.

If I "DetourAttach" FindResource, LoadResource or SizeOfResource Plus! stops working. I still get the menu bar, but the only item on Plus!'s menu is "Software not loaded..."

I can't hook things that Plus! also hooks?

Yes, you can. But you'll need to buy Detours, as that's one of their premium features .

Use another method, like IAT, EAT, Code Overwrite, Extended Code Overwrite, there are some librarys floating around the net

Edit: I've heard you'll need to pass some handle somewhere to get Plus! to apply it's changes.

Please excuse the sarcastic tone of this post. It's meant to be joyful and amusing (maybe even comic).

quote:

---

Originally posted by vikke
Yes, you can. But you'll need to buy Detours, as that's one of their premium features .

---

Yes, THAT is going to happen. In which pocket did I put those $10.000 I had set aside to purchase a license from Microsoft?

quote:

---

Originally posted by vikke

Use another method, like IAT, EAT, Code Overwrite, Extended Code Overwrite, there are some librarys floating around the net

---

Erm... Nice! Apparently ECO is what Detours uses in the first place.

Well, for my part I'm satisfied. I believe further questions would not belong in this thread. "How was Plus! made" has been described and I am happy.

DllInjection and API Hooking for those interested.

Just to make sure you don't corrupt the memory with invalid signatures:

int WINAPI Initialize(void)