Programming and Coding

This is the full source of this little tool, I hope someone will find it useful as you can see It was a 2 day tool so don't expect too much but I commented the code well The Project is coded with Visual studio 2008 using C# Any comments are welcome, you can use this code as you like but It will be nice if you give some credit to Black Storm TEAM... />http://portal.b-at-s.net/download.php?view.479

This is a simple multi-threaded debugger which can be used to inject a DLL into a creatable process and detaches from the process before it starts. It can be used for many purposes... Works like a charm on Windows 7 Source code is included in Delphi Pascal />http://portal.b-at-s.net/download.php?view.480

Using RuntimeTypeHandles to improve Memory of .NET Apps />http://www.bryancook.net/2009/07/runtimetypehandle-performance-memory.html

Does the VB.net compiler using LateBinding or is this a feature of the obfuscator being used? And what is LateBinding? Is it just helper functions for reflection? public static byte[] Ã?a????Ã?öo??aâ?I(string Ã?????ÕoÓ??o??â??) { byte[] buffer2 = Ã?Å?Ò??áu????óaaÂø?oÃ(Convert.FromBase64String(Ã?????ÕoÓ??o??â??)); using (object obj2 = new MemoryStream()) { int num = BitConverter.ToInt32(buffer2, 0x0); object[] arguments = new object[] { buffer2, 0x4, buffer2.Length - 0x4 }; bool[] copyBack = new bool[] { true, false, false }; NewLateBinding.LateCall(obj2, null, "Write", arguments, null, null, copyBack, true); if (copyBack[0x0]) { b…

I've got question about calloc. From what i know calloc uses two paramas - size of element & number of elements. It allocates memory of size of elements * number of elements and returns a pointer to that memory in eax. Memory allocated is filled with 0. My question is what is in four bytes before the pointer? I.e.: push size of elements push number of elements call calloc ;now eax holds pointer to mem mov edx,[eax-4] - what will be in edx Is it totally random or is it somehow determined?

hi guys, i was trying to implement a custom string class for practicing purposes, but i hit a problem regarding memory leaks... to be more precise, the problem is the substring-method: substr(int start, int length); to be used like this: mystring a = "deepzero"; mystring b = a.substr(4,4);//b == "zero" or MessageBox(0,a.subtr(4,4),"test",0); the problem is: when i create the substring, where do i store it? When i allocate space on the heap, it wont be freed anymore... So i figured i`d have .substr() return a mystring object (containing the substring): mystring mystring::substr(int start,int len) { //ptrtostr == pointer to the actual char-array which stores t…

Yohoo guys, I'm proud to present my new decryptor: PELOCKnt decryptor v1.0. This one is based on my previous BJFnt decryptor, because PELOCKnt is an update release of BJFnt. It currently has support for PELOCKnt v2.01, v2.03 and v2.04. (I haven't actually PELOCKnt v2.02) If someone have a copy of PELOCKnt v2.02, don't hesitate to send me it... I will include support in my decrypter... As usual, source code in masm and cryptors are also included for interested ones... Any comments, bug reports or others are welcome... See you soon ... Laurent aka BIGBOSS from COPs CPS!UnPELOCKnt_v1.0.zip PELOCKnt_v2.01.zip PELOCKnt_v2.03.zip PELOCKnt_v2.04.zip

Hi, I always thought calculating the MD5 digest of a string required adding external code, i was using this: http://www.zedwood.com/article/121/cpp-md5-function which works fine. I was messing around with Windows crypt api, and noticed one can easily calculate the digest using WinCrypt APIs: string MD5(string input) { HCRYPTPROV CryptProv; HCRYPTHASH CryptHash; BYTE BytesHash[33];//! DWORD dwHashLen; string final; if(CryptAcquireContext(&CryptProv, NULL, NULL, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT | CRYPT_MACHINE_KEYSET)) { if(CryptCreateHash(CryptProv, CALG_MD5, 0, 0, &CryptHash)) { if(CryptHashData(CryptHash, (BYTE*)input.c_str(), input.le…

hi, everyone seems to hate on the use of "goto" commands in c/c++ and i dont like it too much myself, but i dont see any other way with nested loops: good: for(...) { if(...) break; } not good: for(...) { for(...) { for(...) { if(...) goto done; } } }done: ... any "better" or "cleaner" way, avoiding the goto commmand?

Reflection - The Java Reflection API With the introduction of Java Beans was also the birth of Reflection (formerly " Introspection ") forced initiated because objects were previously found only in static structures. This in turn meantthat the classes had already at compile be available. Because of this fact but the genericapplication form request can not be extended to the interface of a plugin, corresponded, it wasdecided to introduce a new technique? Introspection (later Reflection ). The term Reflection here means that programs which are a generic design to be able put in for herclasses (unknown such as by direct user input) to create instances of objects. The Ref…

Calling invokedynamic in Java DynamicIndy There is no way to invoke invokedynamic using the Java language. So testing invokedynamic is not that obvious if you don't have your own dynamic language. I've developed a small class DynamicIndy that uses ASM 4.0 (not an official release) to generate a static method that calls invokedynamic. These static method is after converted to a MethodHandle that can be called in Java. invokedynamic

My problem is how build driver for Windows7 64Bits... i don't understand o how can make driver for this OS... I've downloaded WDK 7600.16385.1 and use for build my simple driver for XP but now, I want o to make for W7 but i have problem..? "build driver on windowsxp 32 bits for windows7 64 bits" How?

"Hooking" into Java App Engine />http://blog.appenginefan.com/2009/10/hooking-into-java-app-engine.html

Here is some Visual Basic source code from Black Byte to use BassMod to play XM and MOD tunes... Ted. bLaCk_bytE_XM_MOD___FULL.RaR

Hello everyone. The reason of this topic is because I want to make a program to uncap the framerate of some games. I got inspired when I saw some patches achieving unlimited fps on games capped at 30 fps. (Blade Kitten, Transformers: War of Cybertron, Star Wars: The Force Unleashed, etc). I tried to do a d3d hook and also tried to look at those patches in Olly (some of them were packed with PECompact/UPX) but unfortunately my reversing skills are still too weak to know what they did... so in the end I had no success... I'm asking for some help as there are very talented and experienced people here at tuts4you. I really want to know how to do this, specially for learning p…

String compression algorithms: 1. First simple algorithm: Input string "Acccc"; We store first 2 chars "Ac" + a char: - first bit should be set whit 1 for marking that we have a compression here - rest of bits will filled whit numbers of duplicates - under this case 3 "Acccc" -> Ac[3] 2. Second algorithm: Input string "the Udrea, the Basescu"; * We store "the Udrea, " + First char: - first bit should be set whit 1 for marking that we have a compression here - rest of bits will filled whit the lenght of duplicate string - under this case Second char: - all bits should contain the position from where to take the string - under this case 11 "the Udrea, the Basescu…

If I create an application with managed and unmanaged code (mixed assemblies), how can I protect it? I tried already: Themida v2 Smartassembly v4 DotFuscator Community Edition DotNet Reactor v4 MPRESS v1 All create a corrupted PE file. Somebody know any working protector? Is there any sourcecode obfuscator available for C#? I attached an example file... i_ufmod.rar

As it happens, I'm not the first to look into this particular algorithm: the full listing of the decompression routine with some annotations is available on a Chinese blog. I've already been able to write a "poor man's compressor" for it (well, with compression rate 0 so it actually increases the file size), but I'd like to know what algo it is. I suspect it's a readily available open source algo but I have no experience whatsoever with compression algorithms so I figured someone here might know more than I do about the topic. I'm also attaching a small file packed with it. When decompressed, it's actually a resource file with some strings and a bitmap in it. packed.zip

So, I have this packed service that I need to patch at runtime without actually running a loader. I took the easy way, I wrote a DLL and added it to AppInit_DLLs, returning 0 from its DLLMain if it's trying to attach to a different process. So far so good. Next step was to patch the process. Since at the time the DLL is loaded, the exe image isn't even loaded yet, let alone unpacked, my solution was to start a thread as soon as the DLL is attached to the process and enter an infinite loop. Inside the loop I monitor a memory location (one of the patch locations actually) directly (not via ReadProcessMemory() since it's in the same address space) and when it has a certain v…

Hacker Disassembler Engine: To disassemble should call hde_disasm function: void hde_disasm( void *pCode // pointer to code HDE_STRUCT *pHDE_STRUCT // pointer to structure HDE_STRUCT ) After execute, you get filled structure HDE_STRUCT: typedef struct _HDE_STRUCT { BYTE len; // length of command BYTE p_rep; // rep/repnz/.. prefix: 0xF2 or 0xF3 BYTE p_lock; // lock prefix 0xF0 BYTE p_seg; // segment prefix: 0x2E, 0x36, 0x3E, 0x26, 0x64, 0x65 BYTE p_66; // prefix 0x66 BYTE p_67; // prefix 0x67 BYTE opcode; // opcode BYTE opcode2; // second opcode, if first opcode equal 0x0F BYTE modrm; // ModR/M byte BYTE…

Hope someone can give me a hint, because I have the following code copied from reflector(VB.NET) into vb express edition 2010, but I have a lot of errors, so I started fixing the code, but i ended with an error, which it seems I , not yet, can't resolve myself. Here she comes: Private Function genRandomLetter(ByVal rand As Random) As CharReturn IIf((rand.Next(1, 3) = 1), DirectCast(rand.Next(&H41, 90), Char), DirectCast(rand.Next(&H61, &H7A), Char)))End Function And here is the error: Error 2 'Integer' values cannot be converted to 'Char'. Use 'Microsoft.VisualBasic.ChrW' to interpret a numeric value as a Unicode character or first convert it …

Hey Guys, I am having some trouble with patching a file in Visual Basic 2008. The idea is like that .. 1-Store File In The Program Using "Resources" .. 2- If The Program Is Runned .. My Program Should Show This Message "Please Close The Program" Or Making My Program Close The Program That I want To Patch .. 3-If The Program That I want to patch is closed ..Then When you click the button .. the file dialogue opened and give to user the ability to choose the file that i whant to modify "Replace or patched" after that the file will copied from resourse and replaced the old file "Patched" after when this operation finished .. 4- show this message "Your Program Is Patched .. E…

Hello, I trying to code a loader for an app and when I use the function WriteProcessMemory it fails. 1 - OllyDbg shows the error code: ERROR_NOACCESS (000003E6) 2 - I follow this tutorial: http://www.zerorev.net/reversing/Tutorials,%20Guides%20and%20Essays/loader.htm 3 - My system is (original) Windows 7 home premium and I have adm privilegies. I read similar posts in this forum and others and couldn't find a good solution for the problem. Does this approach don't work anymore? Any help could be great. Thanks in advance. BondCracked.

hello guys, I can understand if you do not want to help me but ... I have a program that it uses hardware ID to generate a license, similar to armadillo... however, a larger it is based on the network card for hardware-fingerprint ... I know this because when I change the MAC address, it also changes the hardware-fingerprint ... only it is not only that, but when I try to log in via wifi or cable, hardware id changed and I can not login .... when I change the MAC address of a network card, the hardware-fingerprint changes, but even if I put the two MAC addresses match, the hardware id is never the same ... you will be able to understand? I was wondering how it obtained th…

Hi ! I have found some keygen templates but most of them are in asm, also I have found one made in c but it is made using an old compiler and it cannot be converted for Visual Studio 2010 I have. This topic is to ask someone of this forum if not bother to make a KeyGen template in C++ but for Visual Studio 2010 not an older version. Second, I wish you to make it in such a way to be able to use assembly language includes ripped from Olly with code ripper plugin. They shold be like: _asm { //code ripped from olly } and I wish you to make a commented region where to insert this. Thank you very much ! Happy New Year !