See this link for instructions on how to use SyntaxHighlighter library within Blogger.
~ts.
Monday, July 27, 2009
Dump PE format string resource
Code below can be used to dump PE string resource using python.
Enjoy
~ts
import os import re import pefile #http://code.google.com/p/pefile/ import sys def DumpStr(fname): try: pe = pefile.PE(fname) except: print sys.exc_info()[0] print "Continue to the next exe/dll" return # The List will contain all the extracted Unicode strings # strings = list() # Fetch the index of the resource directory entry containing the strings # try: rt_string_idx = [ entry.id for entry in pe.DIRECTORY_ENTRY_RESOURCE.entries].index(pefile.RESOURCE_TYPE['RT_STRING']) except (ValueError,AttributeError): return # Get the directory entry # rt_string_directory = pe.DIRECTORY_ENTRY_RESOURCE.entries[rt_string_idx] # For each of the entries (which will each contain a block of 16 strings) # for entry in rt_string_directory.directory.entries: # Get the RVA of the string data and # size of the string data # data_rva = entry.directory.entries[0].data.struct.OffsetToData size = entry.directory.entries[0].data.struct.Size # Retrieve the actual data and start processing the strings # data = pe.get_memory_mapped_image()[data_rva:data_rva+size] offset = 0 while True: # Exit once there's no more data to read if offset>=size: break # Fetch the length of the unicode string # ustr_length = pe.get_word_from_data(data[offset:offset+2], 0) offset += 2 # If the string is empty, skip it if ustr_length==0: continue # Get the Unicode string # ustr = pe.get_string_u_at_rva(data_rva+offset, max_length=ustr_length) offset += ustr_length*2 strings.append(ustr) for strx in strings: sSearch = "Set Device" m = re.search(sSearch,strx) if m: print strx path="c:/app/bin" dirList = os.listdir(path) for fname in dirList: m = re.search("exe|dll",fname) if m: print os.path.join(path,fname) fullname = os.path.join(path,fname) DumpStr(fullname)
Enjoy
~ts
Mouse Invisible in VirtualBox guest
In VirtualBox 3.0.2, I have noticed that most of the times the mouse goes invisible on text areas. For example, if you are in Notepad, once you starting writing some text in the text area the mouse pointer goes into the black hole. The work around is really easy. Go to (Windows XP) Control Panel –> Mouse –> Pointers, then select Windows Black (system scheme).
~ts
Monday, July 20, 2009
Partimage invalid compression level workaround
For some reason, some diskimages created using partimage will encounter "invalid compression level" when restored. See below for the workaround to restore the image back.
~ts
#: ntfs-3g /dev/sda1 /mnt/windows #: mv /mnt/windows/img/vista.img.000 /mnt/windows/img/vista.img.gz #: gunzip -c /mnt/windows/img/vista.img.gz | partimage restore /dev/sda1 stdin
~ts
Sunday, July 19, 2009
Installing Easy Peasy in EEE PC 900 using external hard drive
Easy Peasy is a linux distribution tuned for EEE PC (Asus Netbook) computers.
http://www.geteasypeasy.com/
http://www.kernel.org/pub/linux/utils/boot/syslinux/
D:\Software\iso\syslinux\win32>syslinux.exe -m -a -d / i: -f
Working with swapfile
http://ubuntuforums.org/showthread.php?t=1042946&highlight=swapfile
Swappiness
https://help.ubuntu.com/community/SwapFaq#Performance%20tuning%20with%20%27%27swappi ness%27%27
http://www.geteasypeasy.com/
http://www.kernel.org/pub/linux/utils/boot/syslinux/
D:\Software\iso\syslinux\win32>syslinux.exe -m -a -d / i: -f
Working with swapfile
http://ubuntuforums.org/showthread.php?t=1042946&highlight=swapfile
Swappiness
https://help.ubuntu.com/community/SwapFaq#Performance%20tuning%20with%20%27%27swappi ness%27%27
Thursday, July 02, 2009
Windows dialog rc file is using dialog system units
This has never occurred to me before, I have been tweaking win32 API for awhile, but I really never paid much attention with the dimensions as saved in resource files for dialog boxes. Interestingly, the units stored in rc file are not really in pixel but rather in dialog unit. :( My understanding is that this will make the dialog independent of the font size. If user/developer changes the font size, the dialog box will adjust accordingly. Seems like a neat idea but I was dumbfounded at first sight.
It makes my life harder though as I am trying to cross-reference runtime dialog boxes against design time. I was planning to cross ref them using the dimensions but it turns out to be not a good option.
The quest is on...........
Related links:
http://msdn.microsoft.com/en-us/library/aa380902(VS.85).aspx
~rs~
It makes my life harder though as I am trying to cross-reference runtime dialog boxes against design time. I was planning to cross ref them using the dimensions but it turns out to be not a good option.
The quest is on...........
Related links:
http://msdn.microsoft.com/en-us/library/aa380902(VS.85).aspx
~rs~
Wednesday, July 01, 2009
Working with memory leaks
Subscribe to:
Posts (Atom)
Configuring TUN/TAP virtual network interface for use with QEMU on Xubuntu 24.04
Configuring TUN/TAP virtual network interface for use with QEMU on Xubuntu 24.04 I am planning to run qemu-system-ppc to play around QEMU ...

-
Tried to update my Ubuntu host today and it did pickup that new version of VirtualBox is available (4.1.8). All other packages installed pro...
-
Installing MonoDevelop in OpenSUSE 12.2 from its repository was very easy. When running it for the first time though I got the message: Th...
-
This is quick start guide how to run ssh server on QNX. Tested on QNX 6.5 (650SP1-VM.tar). # ssh-keygen -t dsa -b 1024 -f /etc/ssh/ssh...