Programming and Coding
Programming and coding tips, help and solutions...
1,876 topics in this forum
-
Modify FPU Without Detection
by stackwalker- 2 replies
- 3.1k views
Hi guys, i was wondering if there's any clever people out there that can help me with a little problem? I'm setting up a vectored exception handler in a certain target process and applying a DR Context breakpoint at the location which writes to the FPU. Upon recieving the exception in my handler i simply 'FLD <reg>' so my own float gets loaded into the FPU register, then overwrite 'EIP' to the next instruction. I was wondering if theres anyway to modify the register directly, or how to avoid the software detecting my Context modifications. I cant memory-hook the GetThreadContext api at the application level because it detects it. I was wondering if a DR breakpoint …
-
Escargot decryptor.
by bigboss-62- 0 replies
- 2.8k views
Hello again guys... i'm proud to bring you my Escargot decryptor. Source code in masm and crypter are included as usual... See you soon... Laurent aka BIGBOSS from COPs. PS: I can't find Yoda Crypter 1.0 for my previous decrypter here. If someone can send me it ??? CPS_UnEscargot_v0.1.zip Escargot_v0.1.zip
-
How To Create Virtual File ?
by Matrix- 5 replies
- 3.3k views
Hi My Friends How To Create Virtual Executable File With VB Or VC++ And Run It ? Please Help Me Tnx
-
Keygen Src [Delphi]
by IMPosTOR- 7 replies
- 5.7k views
hear is 2 new keygen source code . Author : IMPosTOR \ Under SEH Team Feedback: impostor_76171@yahoo.comPage : www.webkade.ir Homepage: www.impostor.blogfa.comfunction Generate_Serial_by_IMPosTOR: string; var i1,i2,i3,i4,j : integer; A1,B1,C1,D1,E1 : integer; A2,B2,C2,D2,E2 : integer; A3,B3,C3,D3,E3,A3_1,A3_2,A3_3,A3_T : integer; A4,B4,C4,D4,E4 : integer; User_Name,Part1,Part2,Part3,Part4,S1,S2,S3,S4,Final_Serial : string; begin result := 'Error : contact impostor_76171@yahoo.com'; User_Name := LowerCase(Email); for i1 := 1 to length(User_Name) do begin S1 := inttostr(ord(User_Name[i1])); A1 := i1*21; . . .Magic_Keygen_Source.zip
-
Help with olly Pdk
by ragdog- 5 replies
- 3.4k views
Hi I need help for my OllyPlugin i read in the Pdk from olly this ***** Returns pointer to element with specified index in sorted data sorted by actual criterium, or NULL on error. If necessary, function actualizes associated index table, so preliminary call to Sortsorteddata is not necessary. Function is very useful for extraction of selected element in table windows. void* Getsortedbyselection(t_sorted *sd,int selection); Parameters: sd - pointer to descriptor of sorted data; selection - zero-based index in data sorted by selected sort criterium. ***** I know it gives the bookmark example in masm32, i under stand this source not I need a function for get the listview it…
-
Trying to convert C++ to ASM for decrypt routine
by chillywilly- 1 reply
- 3k views
Hi all , new to the board, my friend suggested the smart people at this board would be able to solve this , thanks in advance im not too sure about finding an easy way to do the seed im not too familiar with c++ syntax it gets passed a parameter it gets from the registry which is different for every machine because it seeds with user/SID #define SEED_CONSTANT 0xba0da71dunsigned char secretKey[16]={ 0xa3,0x1e,0xf3,0x69, 0x07,0x62,0xd9,0x1f, 0x1e,0xe9,0x35,0x7d, 0x4f,0xd2,0x7d,0x48 };VOID Decode(_TCHAR output[], _TCHAR passEntry[], DWORD entryLen) { HANDLE hToken; TCHAR sid[512], name[512],domain[512]; SID *psid = (SID*)&sid; DWORD …
-
MZ-Crypt v1.0 decryptor
by bigboss-62- 1 reply
- 3.5k views
Hello guys... A few days after my BJFnt decryptor, i'm proud to bring you my MZ-Crypt v1.0 decryptor. There is a very important bug in the cryptor (including its original decryption engine). It (de)crypts one byte more than the raw size of current section, so it can encrypt an uncryptable section, resulting in a crash of crypted program. This decryptor does in the same way, in order to get original file before this one was crypted. I have also included source code in masm for those who are interested... See you soon in my next decrypter... Perhaps decruncher/unpacker if enough time... Laurent aka BIGBOSS from COPs Added 10-02-2008: The crypter itself CPS_MZCry…
-
Help making KeyGen
by Hageneesjuh- 4 replies
- 3.6k views
Hello, Im trying to make a keygen for "3Q DVD Ripper Platinum", Its using the follow Crypto's: - BASE64 - DES I have Decrypted the DES crypto's already, now, i need somting to Decrypt BASE64, and then i need a KeyGen source to make a good serial btw i can handle :::::: Visual Basic 6, C+ C++ and Delphi, MASM !! Thnx in advance.!!
-
Debugger Src [Delphi]
by BoRoV- 1 follower
- 6 replies
- 3.7k views
Hi! I need debugger sources or unit on Delphi for use in my unpacker
-
PingvinCrypt decryptor
by bigboss-62- 0 replies
- 2.8k views
Yohoo hord of fans, a few days after DEF decryptor, here is PingvinCrypt decryptor. PingvinCrypt was interesting to study, a nice SoftIce antidebug and a header access. This cryptor uses a xor decryption, with the key based on a CRC of header firsts 100h bytes and decrypter bytes. The import decryption is the same key xor 13h Tested with PingvinCrypt v1.0... As usual, source code in masm and cryptor are also included for interested ones... See you soon ... Laurent aka BIGBOSS from COPs PingvinCrypt_v1.0.zip CPS_UnPingvinCrypt_v1.0.zip
-
DEF decryptor.
by bigboss-62- 4 replies
- 4k views
Well, after SPEC decrytor, here is DEF decryptor. Cryptor from Bart was nice to study, because it uses available section table space. This cryptor uses a single xor encryption, based on section size. Tested with DEF v1.0... As usual, source code in masm are also included for interested ones... I am currently working on NFO and PEX from Bart... See you soon ... Laurent aka BIGBOSS from COPs PS: Hello Teddy, I wan't to make a "post it" with all my sources. How can I do (don't see any post-it creation with "New Topic"). Can you help me ??? Thanx DEF_v1.0.zip CPS_UnDEF_v1.0.zip
-
Checkbox background color
by starzboy- 8 replies
- 7k views
Hey ppl I have made a checkbox on top of a bitmap image and the background of the checkbox is white, so i used SetBrushOrgEx and i have got the background transparent, but now i would like to make the text color of the checkbox to some other color, Settextcolor fails. Is there an alternative ? Thanx again
-
where's ID_APP_EXIT's message map [MFC]
by alaphate- 0 replies
- 4.6k views
I built a simple MFC project with MFC appwizard without document/view support. I tried to find how menu item id maps to command. However I cannot find it between BEGIN_MESSAGE_MAP and END_MESSAGE_MAP; How does MFC handle the default menu command? Where can I find ID_APP_EXIT's message map? Thank you for helping. t002.zip
-
Creating file system info snapshots
by kerouo6- 0 replies
- 4.3k views
------- never mind, somewhat solved
-
- 2 replies
- 2.9k views
Hello everyone in this forum. I got a lil problem searched first at google and founded several tools like Peid 0.94/ rdg packer finder/ stud pe/ cryptosearcher/ But they are meaned to analyse pe = portable executable thous fails what i am ineterseted are 1 dll fail called pbcl.dll and 1 system fail. I want to know are they encrypted or not! So if anyone knows program that can be used to analyse thous fail typse feel free to post its name. Forgoted that non of the abouve pe analyser didnt find the encryption. I upload thous 2 fails also in this threat. pbcl.rar PnkBstrK.rar
-
signatureZero
by a_tek7- 6 replies
- 7.1k views
Hi. can anybody tell me how signatureZero work?I mean it's coding technique not tutorial. any body has some source like that? 10x in advance.
-
How to write ImageList?
by alaphate- 2 replies
- 4.1k views
I use ImageList_Write to save imagelist, but the saved bmp is not really bitmap format! But I can display the ImageList correctly in my app. Any buddy could help me? Thanks a lot. Attachment is my project. //code//////////////////////////////////////////////////////////////// HDC hdc; PAINTSTRUCT ps; static HIMAGELIST hil; HICON hicon1, hicon2, hicon3; int i; IStream * pStream; case WM_CREATE: pStream = 0;hil = ImageList_Create(16, 16, ILC_COLORDDB, 3, 0);ImageList_SetBkColor(hil, RGB(255,255,255));hicon1 = LoadIcon(hInst, "MYICON1");ImageList_AddIcon(hil, hicon1);hicon2 = LoadIcon(hInst, "MYICON2");ImageList_AddIcon(hil, hicon2);hicon3 = LoadIcon(hInst, "MYICON3");Image…
-
Whats the difference between C++ and Turbo C++
by blackshadowbutt- 5 replies
- 3.6k views
I am very newbie in c and i want to know about it . Whats the difference between c , c++ and Turbo C++ And what is best for me to learn first.
-
SPEC beta 2 and beta 3 decryptor.
by bigboss-62- 0 replies
- 2.8k views
Just back from holidays and i bring you my new SPEC decryptor. Cryptor from Hayras was nice to study this time, because it encrypts IAT (and resources in Beta 3). This cryptor uses a single encryption, the hardest work was to recalculate the IAT size, but it was not needed... My decrypter is working with SPEC Beta 2 and Beta 3... Source code in masm is also included for those who are interested... See you soon ... Also included the source of the original crypter (slightly updated by me, but I left main of the code)... PS: I'm looking for SPEC Beta 1 (aka Beta) to include it in my decrypter. If you have it, can you send me a link for it or send me it... Laurent …
-
[MASM] Why does it crash?
by ShadowRayz- 8 replies
- 3.7k views
start: invoke ShellExecute,NULL ,NULL ,addr Notepad ,NULL ,NULL, SW_SHOWNORMAL end startthat's the whole code, besides the Notepad variable Notepad db "C:\Windows\Notepad.exe",0it opens notepad but then i get a memory crash, mem cannot be read. why is that?.
-
d2k2's Image Converter [MASM code example]
by diablo2oo2- 7 replies
- 3.4k views
I found some nice codesnippet on the MASM-Board. I think it could be interesting for some of you... I modified it a little so that you can use more image formats. http://diablo2oo2.di.funpic.de/downloads/d...age.convert.zip d2k2.image.convert.zip
-
learning VB .NET...
by felix1432- 1 reply
- 3.8k views
hi! I want to learn VB .NET. Only I cant find anything about it! I only get stuff from 2003 and below. Could some1 give me a hint? Some beginner web page or tuts or something? thanks in advance.. This is a great forum here. I am sad to her of the retiring of Markus th-djm. felix1432
-
- 7 replies
- 4.4k views
This was a little project I was working on, mainly to get an idea on using a debugger. I am releasing because ,well, I am done working on it and the code is a little messy. Makes you want to look at the code doesnt it? :biggrin: Anyway should work on a lot of targets including armadillo itself and unpackmes from this site, and a few other tests. The method I used for patching was OutputDebugStringA hook, a lot less code that way, and to call the hook I intercepted the first call. All the code is placed in the ep section right when the code goes to 00s, works on all protections. The exe is not included which makes you compile it yourself, it is a Radasm project so all yo…
-
How to encrypt a string
by alaphate- 2 replies
- 4.3k views
The application is a simply messagebox. I can use WinHex to open the exe file, and search and replace "HelloWorld" string. Is there a way to encrypt such string, so that I can not find "HelloWorld" ? Source code: #include <windows.h> int WINAPI WinMain( HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd) { MessageBox(NULL, "HelloWorld", "Title", MB_OK); return 0; } Thanks for helping.
-
how to hide console window?
by alaphate- 9 replies
- 4.2k views
I want to convert a batch file (clean.bat) to clean.exe, but I dislike the console window. Any buddy knows how to hide the cmd window? Thanks a lot. WinExec and ShellExecute seem can not fit my requirement. del /f /s /q "%userprofile%\Local Settings\Temp\*.*" del /f /s /q "%userprofile%\recent\*.*" reg delete "HKCU\Software\Microsoft\Internet Explorer\TypedURLs" /va /f reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU" /va /f reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs" /f//clean.exe#include <windows.h> #include <process.h>int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrev, LPSTR pCmdLine, in…
