Hier poste ich ASM und Reversing Zeugs welches ich nicht in einem Thread packen kann, da es sich nicht lohnen würde.

4Story Clientless Bot <3

Posted 08/16/2014 at 02:25 by Tension (Reversing mit Tension)

Hey

just started working on a new project:

hope there are some interests

Tension

tightest pimp in town

Posted in Uncategorized

Views 902 Comments 0 Tension is offline

4Story Packet Script

Posted 07/29/2014 at 13:01 by Tension (Reversing mit Tension)

Hey,
had an idea about a "packet-script" language for 4Story.

It's based on Python and only got 4 basic functions:

Code:

rTYPE(address)
wTYPE(address, value)
loadpacket(path)
sendpacket(path)

with the tool you would be able to create .. maybe a bot?

a sample source for hp-regeneartion would look like this:

Code:

hp = rint(rint(rint(0x13371337+0x1)+0x2)+0x3)
reg_pack

...

Tension

tightest pimp in town

Posted in Uncategorized

Views 729 Comments 0 Tension is offline

GetAddress & GetName ( Alternative zu GetProcAddress )

Posted 05/02/2014 at 20:31 by Tension (Reversing mit Tension)

Yoho,

Bei einem Projekt passierte mir was ganz witziges, GetProcAddress hat mir Gülle ausgegeben, damit sowas nicht passiert hab ich mir selber eine Funktion geschrieben und dachte mir dazu warum auch nicht gleich das Gegenteil davon? Eine Adresse zur API zurückwandeln!

Beweis.

Hier die beiden Funktionen:

Code:

;$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
;GetAddress
;Parameter:

...

Tension

tightest pimp in town

Posted in Uncategorized

Views 921 Comments 0 Tension is offline

ASProtect OEP - [MASM]

Posted 04/15/2014 at 00:11 by Tension (Reversing mit Tension)
Updated 04/15/2014 at 00:15 by Tension

Da ich eigentlich vor hatte einen ASProtect-Unpacker zu schreiben und mir dann die Lust dran vergangen ist, pack ich hier mal meinen momentanen Source rein.
Was Fehlt:

IAT-Fixer (Obfuscated Calls)
Stolen Bytes

hier ist jedenfalls mein bisheriger code:

Code:

ifndef	_UNPROTECT__ASPROTECT
_UNPROTECT__ASPROTECT equ<1>

include extension.asm

.const
ASPR_EXE			equ	0
ASPR_DLL			equ	1
ASPR_SCANSIZE		equ	255

...

Tension

tightest pimp in town

Posted in Uncategorized

Views 1043 Comments 0 Tension is offline

IMBA 4STORY ASPROTECT 4STORY OLLYSCRIPT!!!!

Posted 02/12/2014 at 22:10 by Tension (Reversing mit Tension)

So this is my ultra-imba-1337 4Story GSP unpacking script of doom it just directs you to the entry point. Use my Fixer to fix the bytes etc.

Code:

VAR bp_1
VAR c_sec_size
VAR oep
VAR cmd


start:
  DBH
  RUN  
  JMP DbgLoop  

DbgLoop:
  FIND eip, #3100648F050000000058833D????????007414#     
  CMP $RESULT, 0    
  JNE DbgFound  
  ERUN
  JMP DbgLoop
DbgFound:

...

Tension

tightest pimp in town

Posted in Uncategorized

Views 706 Comments 0 Tension is offline

Page 1 of 2