Programming and Coding

enjoy!!! about.zip

Hello. I got a function which returns hash from const char*, and obviously the same input gives same 32 byte hash. My problem is that after compilation program recounts the hash everytime, is it possible to tell compiler to count it during compilation time and just save the hash value? Im creating wrappers for common functions like getmodulehandle, getprocaddress etc with PE parsing, and the problem is that such piece of code for example myGetModuleHandle(hash("kernel32.dll")) generates assembly which counts the const char* hash everytime, and i would like the compiler to make it myGetModuleHandle(0xdeadbeef) where its the counted hash. How can i achive that?

hi guys First of all, I hope I started this new thead on thew right spot... I'm looking for windbg/OllyDbg/idapro script which can be use to print or get memory location of flash/actionscript loaded object such as Vector, Array, String object, etc...Also other then script, I am looking the tutorial to print or get memory location of flash/actionscript. Or any tutorial to get flash/actionscript object memory layout I need this info so I can dump or see flash/actionscript object memory layoutI read and tryed various tutorial including the one on CoreLan Website Still I just cannot find it. I watched Heap Inspector videoo too, But Im stuckedI m stucked, I REALLY need…

Hi, is it possible somehow to get size or end address of a procedure, preferably without modifying procedure itself? e.g: Procedure Asem; begin asm mov eax, 5; add eax,8 shl eax,1 end; end; I want from my application determine size(number of bytes) of its own procedure, let's say, when I press a button. It's quite easy by using pointers to get start address of first line mov eax, 5, but how to get address of the last line(eventually RET)? For the sake of simplicity let's say the procedure is pretty simple with only one exit point and no external jumps outside of itself.

Hello guys. I have some problems with injecting new class with one method inside it. Basicly this class is placed in my project and i need to insert it in assembly using dnlib, then call the method from it from constructor. My code sample: AssemblyDef assembly = AssemblyDef.Load(FilePath); ModuleDef module = assembly.Modules[0]; Importer importer = new Importer(module); // Create new importer. IMethod meth = importer.Import(typeof(MyClass).GetMethod("Initialize")); // Trying to import initialization method and then place it into a new class. TypeDef type = new TypeDefUser("NewClass"); // Creating new type. type.Attributes = TypeAttributes.Class; // Setting class …

Hello guys! I'm now on finding out how cryptor works (more on my previous topic) So there is some stub, with randomly generated method names, and randomly generated byte array that crypts the file: Sample of decryptin code: string text = (string)ResourceManager...byte[] array = new byte[text.Length];// and decrypt method string text = (string)resourceManager.GetObject(...... //using the string from crypted resources (i dont how its even store in resouces like that) byte[] array = new byte[text.Length]; for (int i = 0; i < text.Length; i++) { array[i] = (byte)text[i]; // decryption }//the most simple maybe... how to make encoder from this? …

Hi, here's another player lib, and I guess it comes with one of the best compromises between audio quality and size. The sound is awesome, but don't get fooled by the size of the included sound module examples (.ptp files), because they already come in a ready-to-get-compressed format. Check out the homepage for further info: http://code.google.com/p/protrekkr/ All credits to hitchhikr ofc.. a real magician. (Find some of his demos, if you don't know this guy yet.) And again thanks to eNeRGy/dAWN for the hints and the static lib! So here's the static lib and some example code in asm: PtkReplay.7z cheers

I can Use Cheat Engine Scan String password found . How can I protect Thank you

File Name: PureBasic patch template with crc check by [sST] File Submitter: Bilbardfayim File Submitted: 11 Apr 2015 File Category: Source Code PureBasic patch template 2 with crc check by SST Click here to download this file

Hello, I am trying to debug/reverse engineer a program made in delphi, using x32dbg. This program use madExcept (which replace the default Delphi exception manager). If i put a breakpoint somewhere in the debugger, when it ran over the breakpoint, it does not break in the code, instead madExcept kicks in and the application show an error message : This is nice because the "bug report" can show me a stack trace and also a disassembly with full methods names It does not however , stop and break in the x32_dbg debugger (which i really want to), and thus does not allow me to run the program step by step. In the disasm window (…

Yo, I am planning to code some method encryption, and I wanted to ask if there are alternatives to JitHooking. The problem is not hoe to encrypt/decrypt the methodbodys, - that's simple, the question is how I can detect the calls so I know when to decrypt. JitHooking is pretty unstable and might not work properly in future versions of the .Net FW. I am open for ideas and suggestions.

What can do any more? string decryp is given error unpackme.rar

It's possible to create suspended process, change for example entrypoint and when resumed it would start from changed EP? I have a non-working executable(wrong EP) idea is to modify PE header but only when it's loaded in memory. I used WriteProcessMemory api to write correct EP to header but when resumed, process crashes. WriteProcessMemory returns success, so problem must be somewhere else. Is it too late to modify header when the process is suspended? thanx in andvance

Hi all,I have a small poker odds calculator a free software and would like to implement it into my delphi application. (HandOdds class) where we input players hole cards, dead cards, etc. It will calculate the odds. Somehow i would like to call a class (in its DLL). OR just translate it to delphi style.Could someone help? I appreciate it !Here is the link to the source and binary of the calculator:https://mega.nz/#!wlAkUZbL!zj1A_GZE3kr1ib7mL4BdskeHAgh6u0j1bvtKiv2wPYY

Hi im new to de4dot midding so when i finaly made this to work i wanted to share with ewryone Open De4Dot source (be shure that you can compile it Video //Credit to @li0nsar3c00l) Then go to de4dot.code/deobfuscators and create New Folder (Phoneix_Protector) and create 2 classes Deobfuscator.cs and StringDecrypter.csand paste this codeDeobfuscator.cs using System.Collections.Generic;using dnlib.DotNet;using de4dot.blocks;namespace de4dot.code.deobfuscators.Phoneix_Protector{ public class DeobfuscatorInfo:DeobfuscatorInfoBase { public const string THE_NAME = "Phoneix Protector"; public const string THE_TYPE = "pp"; const string DEFAULT_REGE…

skull.zip

hello guys! I've have been looking for a batch ai/chatbot for the last year. so I thought to myself: why not just make one? so I went ahead and did. please leave reviews,ratings comments etc. get it here:https://sourceforge.net/projects/meri/

I want to write a plugin that can set command line. The executable have some dynamic arguments ,so i decided to write a plugin. I browsed some apis from ollydbg plugin help, couldnot find .Or i missed something . Any hint , so appreciated . Thanks.

I'm using plain C to call these functions of GDI+ ,and response WM_PAINT with this function ,the last call of GdipDrawImage returns 0, it means success ,but on my picture control I can not find my picture on it.source.txt

Hello. I was wondering how can i create a call stack to view the return addresses. So i found that fancy function, it worked prefrectly in one .exe, showing call stack up to ntdll but it does not show full backtrace when called from a hook. Sometimes it prints 1, 2, 3 addresses but i know how that program is working and the call stack is much bigger. The "Call Stack" function from olly shows exactly same not full result but i can view stack and see which address is a return address, but i cant dereference values from the stack to see if its a return address because i would crash on access vioaltion very quickly. How can i make it work properly?

File Name: PureBasic keygen template by [sST] File Submitter: Bilbardfayim File Submitted: 11 Apr 2015 File Category: Source Code PureBasic keygen template by [sST] Click here to download this file

Hello everyone. Today i bumped onto one very crazy idea I am trying to preapre an exe file from scratch, not using any compiler, just create hex file. Im goin to create PE header, fill all values, create sections, directories, imports etc. So here comes my question. How much work has to be done to make windows loader successfully load the exe, map it and run the code inside? Is it only about creating the header with all its dependiences, or somehing more?

VirtualBox Hardened VM detection mitigation loader x64 from kernelmode.info.Step by step guide for VirtualBox Hardened (4.3.14+) VM detection mitigation configuring. http://www.kernelmode.info/forum/viewtopic.php?f=11&t=3478'>>http://www.kernelmode.info/forum/viewtopic.php?f=11&t=3478 https://github.com/hfiref0x/VBoxHardenedLoader'>>https://github.com/hfiref0x/VBoxHardenedLoader

exe is protected by dng3.68,unpack it using DNGuardHVMUnpacker, and it work well,but when i patch and save it in reflector,it show error. Round Trip with ILDASM ILASM fails: error -- Failed to open managed resource file '' error -- Failed to open managed resource file ' ' Output file contains errors ...... Now i want to add some codes in the exe ,what can i do ?

Hello, I decided to share some projects are difficult to find in Delphi.I hope it will be useful and that someone can improve - DbgThr - Fast and simple Debug in delphi - PE_LIB - library for manipulating File format PE32 / 64 - DAForge_IA - Artificial Intelligence in Delphi There is also another project(Private repository at this Moment), code generator based on nasm. It works very well but still is the first release and is to be tested and then I would also implement the syntax MASM. https://bitbucket.org/Pigreco6 Hello soon sorry for my bad english