[mafia_man]

[img]http://imagizer.imageshack.us/a/img842/2356/ny8l.png[/img]

[img]http://imagizer.imageshack.us/a/img838/5183/s2co.png[/img]



Lua Builder is a combination of C#, C++, BlitzMax and Lua itself.

Stub
Size: 510kB

It's written in BlitzMax and C++, and uses lua for your applications.
There are two stubs: gui and console for debugging lua code.

It's currently fud both runtime and scantime.

Builder
Builder is written in C#, and I included 3 binaries written in BlitzMax:

• encrypter.exe - Encrypts given data (I was to lazy to implement random number generator, which my stub uses)
  


• resadd.exe - Adds resource to given executable
  


• resicon.exe - Changes icon of given executable (not used yet)
  

Scans of builder, binaries and stubs
ClamAV (PUA.Win32.Packer.MingwGcc-2) is a false-positive.

• » Builder @ VirusTotal.com
  


• » Stub (with crypter stub code and bound virus and fake installer) @ RazorScanner.com
  


• » encrypter.exe @ VirusTotal.com
  


• » resadd.exe @ VirusTotal.com
  


• » resicon.exe @ VirusTotal.com
  

[img]http://imageshack.com/a/img843/6347/fg86.png[/img]

How to get it? It's only available for L33t, Ub3r, HF Staff and 3P1C.
And I can also make exceptions for some normal users, with good reputation.

I don't want some random skid upload stubs to virustotal.com, or shit site like that.
Just send me message here, on HF. 🤝

[img]http://imagizer.imageshack.us/a/img845/5326/4yl1.png[/img]

You can extern most win32 functions (if not all), because I am not using pure lua but LuaJIT. Read about it » here «

Those are available from my stub:
View functions (Click to View)

• Function fromcstring(int memoffset)
  Description: Converts one byte sized string from specified memory offset and returns it to lua.
  Returns: string
   
  


• Function fromwstring(int memoffset)
  Description: Converts 2 byte sized string from specified memory offset and returns it to lua.
  Returns: string
   
  


• Function tocstring(string string)
  Description: Converts lua string to one byte sized string, and returns it address.
  Returns: int
   
  


• Function towstring(string string)
  Description: Converts lua string to 2 byte sized string, and returns it address.
  Returns: int
   
  


• Function savememtofile(string filepath, int memoffset, int size)
  Description: Reads data from specified memoffset, and writes it to file.
  Returns: int
   
  


• Function getresource(string resname, string restype, int reslangid, int hModule)
  Description: Gets pointer to specified resource in hModule,
  if hModule is set to 0, current executable hModule is used.
  Returns nil if resource doesn't exist.
  Returns: int/nil
   
  


• Function addresource(string filepath, string resname, string restype, int reslangid, int memoffset, int size)
  Description: Adds resource to specified file.
  Returns: nil
   
  


• Function changeicon(string filepath, string iconpath)
  Description: Sets icon of file.
  Returns: nil
   
  


• Function me_setkey(string key, int encryptionpasses)
  Description: Sets key for encryption/decryption.
  Returns: nil
   
  


• Function me_encrypt(int memoffset, int size)
  Description: Encrypts/Decrypts given memory.
  Returns: nil
   
  


• Function me_encryptstring(string string)
  Description: Encrypts string and returns it as base64 encrypted string.
  Returns: string
   
  


• Function me_decryptstring(string string)
  Description: Decrypts base64 encrypted string.
  Returns: string
   
  


• Function input()
  Description: Waits for console input, and returns it.
  Returns: string
   
  


• Function getversionex(int memoffset)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function gettokeninformation(int tokenHandle, int tokenInformationClass, int tokenInformation, int tokenInformationLength, int returnLength)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function getcurrentprocess()
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function openprocesstoken(int processHandle, int desiredAccess, int tokenHandle)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function terminate()
  Description: Terminates application.
   
  


• Function getdir()
  Description: Returns current directory.
  Returns: string
   
  


• Function getappargscount()
  Description: Returns argument count.
  Returns: int
   
  


• Function getapparg(int argid)
  Description: Returns specified argument id value.
  Returns: string
   
  


• Function getlasterror()
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function shellexecute(int hwnd, string lpOperation, string lpFile, string lpParameters, string lpDirectory, int nShowCmd)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function createprocess(string lpApplicationName, string lpCommandLine, int lpProcessAttributes, int lpThreadAttributes, int bInheritHandles, int dwCreationFlags, int lpEnvironment, int lpCurrentDirectory, int lpStartupInfo, int lpProcessInformation)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function getint(int memoffset)
  Description: Returns integer (4 bytes) from specified memory offset.
  Returns: int
   
  


• Function getshort(int memoffset)
  Description: Returns short (2 bytes) from specified memory offset.
  Returns: int
   
  


• Function getbyte(int memoffset)
  Description: Returns byte from specified memory offset.
  Returns: int
   
  


• Function setint(int memoffset, int integer)
  Description: Sets integer (4 bytes) at specified memory offset.
   
  


• Function setshort(int memoffset, int short)
  Description: Sets short (2 bytes) at specified memory offset.
   
  


• Function setbyte(int memoffset, int byte)
  Description: Sets byte at specified memory offset.
   
  


• Function memfree(int memoffset)
  Description: Frees memory at specified offset.
   
  


• Function memcopy(int dstmem, int srcmem, int count)
  Description: Copies bytes from source to destination.
   
  


• Function memalloc(int count)
  Description: Allocates specified amount of memory and returns memory offset to allocated memory.
  Returns: int
   
  


• Function getthreadcontext(int hThread, int lpContext)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function virtualprotectex(int hProcess, int lpAddress, int dwSize, int flNewProtect, int lpflOldProtect)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function writeprocessmemory(int hProcess, int lpBaseAddress, int lpBuffer, int nSize, int lpNumberOfBytesWritten)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function setthreadcontext(int hThread, int lpContext)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
   
  


• Function resumethread(int hThread)
  Description: http://msdn.microsoft.com/en-us/library/...s.85).aspx
  Returns: int
  

[DaPiranha]

Finally, you released it hahaha, awesome stuff bro!

100% legit guy, deserves my vouch, very hard working and provides HQ stuff!

[The Undertaker]

Can I have the link? I use http://fuckingscan.me/index.php

[zaher7777]

can u send me link to your crypte i use nodistribute.com

[xBrokenSoul]

Can I have a download link please? PM Me, thanks in advance 🤝

[mafiaanonymous]

Can Download Link Plasee , pm me , Thank you bro :D

[4saken]

could you send me the download link? would love to get this.

Thanks :)

[Ghrulx]

Could i get a download link? Kindly appreciated mate! Thank you for the hard work and dedication :3

[Mr. Miyagi]

PMing you now OP, I would like to check this out.

[Crizzybee]

Looks great to use. Can I have the download link, please?
I'm currently use 'ResHacker', which is good but it's inconvenience than yours.

[mafia_man]

It's not FUD anymore, only private stubs. I do not release them to public.