Advertisement
Guest User

Untitled

a guest
Jul 13th, 2012
159
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.50 KB | None | 0 0
  1. 01.jul.2012:
  2. client:
  3. certificate & drivers reincluded in the exe
  4.  
  5. e_krnl(apply to client and hack):
  6. bea-engine is not used anymore, hde (32/64) is used instead
  7.  
  8.  
  9. 24.jun.2012:
  10. e_anon(32&64):
  11. not anymore blank rh hack but blank dlls 32/64
  12.  
  13. 23.jun.2012:
  14. e_sys(32&64):
  15. 32&64:
  16. MEMORY_PROTECT will now handle variable size of any lenght (not limited to one page maximum anymore)
  17. 64:
  18. MEMORY_LOCK/MEMORY_PROTECT now also handle 64bit addresses hence security of native process is now fully assured
  19.  
  20.  
  21. 20.jun.2012:
  22. e_krnl(apply to client and hack):
  23. now exports more stuff 32&64 compatible,
  24. smbios infos, two methods only, none for winxp32,it's to come.
  25.  
  26.  
  27. 13.jun.2012:
  28. plugins:
  29. ported 'global plugins' to x86-64
  30.  
  31. e_krnl(apply to client and hack):
  32. fixed dll_map class for working with pe32+(amd64)
  33. added interception of critical functions via iat patching before resolving them,
  34. so it's not anymore needed for the user to have extra redefine in plugins & drawers ,
  35. 'malloc,new,realloc,delete,free' will then pass thru driver automatically
  36.  
  37. 12.jun.2012:
  38. drawers:
  39. ported to x86-64 aswell as moved into a subdirectory of their own in "rhc_bin\drawers\x86-??"
  40. the only missing drawer actually is directx 8 due to the lack of d3d8x.lib for it (must search for, delayed)
  41.  
  42. royalhack:
  43. ported to x86-64 ,
  44. plugins therefore are as drawers:
  45. into a subdirectory of their own in "rhc_bin\plugins\x86-??"
  46.  
  47. 11.jun.2012:
  48. client:
  49. native 64 bit client executable (same as the 32 bit one, faster than in wow64 eats less memory too)
  50. irc module is less of a bother, eats less resources
  51. bassmod is removed(we had 32 bit only, new one is different + 64, removed),
  52. 3rd party evil player is used instead (see tools path,lightweight freeware indeed)
  53. system account detection (for elevation),
  54. is fixed for foreign language (ex: sistèma, then loopback elevate, never login, flashing console, ets...)
  55. dep can be enabled even permanently
  56. taskbar/shell icon remotely aquired (can be updated silently at anytime)
  57. directx(8,9,10,11) offset grabber fixed for 64 bit version
  58. the client clean the place behind himself,
  59. it'll close whatever exe it launch'as system' (childs,hidden or not,player/dbgview/psexec/cmd/else)
  60. vista/2008r1(sp0/sp1/sp2) and seven/2008r2(sp0/sp1) for x86-32/x86-64(disabled patchguard, debug mode) tested
  61. windows 8 tested only in 64 bit version of the oses (dev-prev,cons-prev,rls-prev)
  62. act erratically in windows xp 'it works or no' depends of the os-iso/intall/drivers/service packs/the softwares/the antiviruses/the face of the user/whatever else i not mentioned
  63.  
  64. e_krnl(apply to client and hack):
  65. fixed for compiling as 64 bit with vs10+intel12.1
  66. manually make use of ddk's crt init rather than fully custom (handle it all rather than lacks this or that)
  67. does not mess up anymore when allocating memory
  68. does not contains "superflux/extras" in windows_api.cpp anymore
  69. harware random number genrator (some cpu only sry),
  70. should not bugs out anyone who can not use it see rand_hw.cpp
  71. added crc32 runtime hasing for compile time encrypted strings see "encrypt_line" ctstr.h
  72. if/when a protected "DYN_LOCK" function,
  73. has crashed the user will be asked if continue or leave the application see macro.h
  74. removed locker::dump "contained.cpp" function in "container.cpp"
  75. removed tib/teb/peb fake classes that inherit of each other & copy, use the real deal instead
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement