I need some help translatin this ...
typedef struct _MIB_TCPROW_EX
{
DWORD dwState; // MIB_TCP_STATE_*
DWORD dwLocalAddr;
DWORD dwLocalPort;
DWORD dwRemoteAddr;
DWORD dwRemotePort;
DWORD dwProcessId;
} MIB_TCPROW_EX, *PMIB_TCPROW_EX;
typedef struct _MIB_TCPTABLE_EX
{
DWORD dwNumEntries;
MIB_TCPROW_EX table;
} MIB_TCPTABLE_EX, *PMIB_TCPTABLE_EX;
void main(void)
{
....
PMIB_TCPTABLE_EX TcpTable;
....
I tried:
MIB_TCPEXROW? ? ? ?STRUCT
? dwState? ? ? ? ? ?DWORD ?
? dwLocalAddr? ? ? ?DWORD ?
? dwLocalPort? ? ? ?DWORD ?
? dwRemoteAddr? ? ? DWORD ?
? dwRemotePort? ? ? DWORD ?
? dwProcessId? ? ? ?DWORD ?? ? ? ? ? ? ?
MIB_TCPEXROW? ? ? ?ENDS
PMIB_TCPEXROW? ? ? MIB_TCPEXROW <?>
MIB_TCPEXTABLE? ? ?STRUCT
? dwNumEntries? ? ? DWORD ?
? table? ? ? ? ? ? ?MIB_TCPEXROW <>
MIB_TCPEXTABLE? ? ?ENDS?
PMIB_TCPEXTABLE? ? MIB_TCPEXTABLE <?>
?and now?
PMIB_TCPTABLE_EX TcpTable; <- ??
i tried:
TcpTable? PMIB_TCPEXTABLE <> <-? fails
TcpTable? PMIB_TCPEXTABLE <?> <-? fails
?How i can do this? Thanx in advance and excuse my poor english.
typedef struct _MIB_TCPROW_EX
{
DWORD dwState; // MIB_TCP_STATE_*
DWORD dwLocalAddr;
DWORD dwLocalPort;
DWORD dwRemoteAddr;
DWORD dwRemotePort;
DWORD dwProcessId;
} MIB_TCPROW_EX, *PMIB_TCPROW_EX;
typedef struct _MIB_TCPTABLE_EX
{
DWORD dwNumEntries;
MIB_TCPROW_EX table;
} MIB_TCPTABLE_EX, *PMIB_TCPTABLE_EX;
void main(void)
{
....
PMIB_TCPTABLE_EX TcpTable;
....
I tried:
MIB_TCPEXROW? ? ? ?STRUCT
? dwState? ? ? ? ? ?DWORD ?
? dwLocalAddr? ? ? ?DWORD ?
? dwLocalPort? ? ? ?DWORD ?
? dwRemoteAddr? ? ? DWORD ?
? dwRemotePort? ? ? DWORD ?
? dwProcessId? ? ? ?DWORD ?? ? ? ? ? ? ?
MIB_TCPEXROW? ? ? ?ENDS
PMIB_TCPEXROW? ? ? MIB_TCPEXROW <?>
MIB_TCPEXTABLE? ? ?STRUCT
? dwNumEntries? ? ? DWORD ?
? table? ? ? ? ? ? ?MIB_TCPEXROW <>
MIB_TCPEXTABLE? ? ?ENDS?
PMIB_TCPEXTABLE? ? MIB_TCPEXTABLE <?>
?and now?
PMIB_TCPTABLE_EX TcpTable; <- ??
i tried:
TcpTable? PMIB_TCPEXTABLE <> <-? fails
TcpTable? PMIB_TCPEXTABLE <?> <-? fails
?How i can do this? Thanx in advance and excuse my poor english.
Check madwizard.org, his nettool example should have what you're looking for.
that example has not helped to me....
ideas?
ideas?
hunter,
If you want assembler from C code and its ANSI compatible, shove it through a Microsoft C compiler with the ASM output option. Its no jy to read but it will build in MASM with a little fiddling.
If you want assembler from C code and its ANSI compatible, shove it through a Microsoft C compiler with the ASM output option. Its no jy to read but it will build in MASM with a little fiddling.
well if you want you may try looking at masmplugin sdk by eviloid for ollydbg
he has converted the whole plugin.h to plugin.inc?
you may get a lot of pointers in struct conversions like what you are seeking
small comparison
typedef struct t_hexstr { // String used for hex/text search
int n; // String length
uchar data; // Data
uchar mask; // Mask, 0 bits are masked
} t_hexstr;
t_hexstr struc 1 ; String used for hex/text search
n dword ? ; String length
data byte TEXTLEN dup (?) ; Data
mask_ byte TEXTLEN dup (?) ; Mask, 0 bits are masked
t_hexstr ends
ollydbg.win32asmcommunity.net/stuph?
it is for 1.08 version so you should get relevent plugin sdk from ollydbgs site if you wish to compare them
home.t-online.de/home/ollydbg
he has converted the whole plugin.h to plugin.inc?
you may get a lot of pointers in struct conversions like what you are seeking
small comparison
typedef struct t_hexstr { // String used for hex/text search
int n; // String length
uchar data; // Data
uchar mask; // Mask, 0 bits are masked
} t_hexstr;
t_hexstr struc 1 ; String used for hex/text search
n dword ? ; String length
data byte TEXTLEN dup (?) ; Data
mask_ byte TEXTLEN dup (?) ; Mask, 0 bits are masked
t_hexstr ends
ollydbg.win32asmcommunity.net/stuph?
it is for 1.08 version so you should get relevent plugin sdk from ollydbgs site if you wish to compare them
home.t-online.de/home/ollydbg
omg - dude, I'll teach you to convert structs. I can't believe that nobody has offered to explain how to convert the datatypes.
PM me via this board :)
PM me via this board :)
void main(void)
{
....
PMIB_TCPTABLE_EX TcpTable;
....
No one knows how to translate this?
{
....
PMIB_TCPTABLE_EX TcpTable;
....
No one knows how to translate this?
hunter,
It looks like an structure set as a LOCAL. What you need is to find the C/C++ structure and post that them someone can probably help you.
It looks like an structure set as a LOCAL. What you need is to find the C/C++ structure and post that them someone can probably help you.
PMIB_TCPTABLE_EX is a pointer to a MIB_TCPTABLE_EX structure. So TcpTable is a pointer to a MIB_TCPTABLE_EX structure.