Hola!

Antes que nada, te recomiendo leer esto.

Si entiendes lo que dice ahí, entonces podrás continuar con cosas más avanzadas.

Esa es una explicación bastante básica sobre lo que es un exploit.

Si tienes mas dudas puntuales, no tengas miedo de preguntar.

Saludos!

Hola!

Al ser un programa tan viejo, te recomiendo analizarlo con IDA.

Saludos!

Hola!

Revisa este post.

Saludos!

Hola!

Revisa esta pagina.

Saludos!

Hi zilox!

One thing you can do it's to execute the function itsetf. This is a generic method when resolving APIs manually.
To do this you just put a memory BP on the .text section of system modules (kernel32, user32, ntdll, etc.) depending on what you think the API colud be.
Then, you use the "New origin here" on the first instruction of the API. When the program tries to execute the API, the BPM will trigger.

That's the idea... 

cheers!

Hi zilox!

As I told you, the first of the 4 bad entries in the IAT is ExitProcess. You can fix it with ImpRec by double-clicking the address and selecting the adecuated API.
I also told you that the other 3 must return 0 in EAX. You must patch them manually.
BUT 2 of them, return data in the stack also. So, I suggest you to search for the references to those functions, and put a BP on them. Now, when the function gets called, watch the stack parameters and how are they filled. Also, you should watch what the program does with those values. When you find what to put in the parameters to make the program work, just patch the function manually.

And that's all. You don't need to analyze the function, because it's a packer's function and it's heavily ofuscated.

Cheers!

Hola!

Puedes empezar por aqui.

Luego aqui.

Y por último (pero no menos importante): aqui.

Saludos!

Hola!

Lo más probable es que el programa esté protegido con algún packer. Te recomiendo que empieces mirando por este sitio.

Saludos!

Hola!

Prueba con este codigo:

Private Sub Command1_Click()
res = ShellExecute(Me.hwnd, "Open", "http://wiki.elhacker.net/system/app/pages/customSearch?scope=cse-goog_1258298707613&q=; " + text1.Text + ";&search=", "", "", 1)
End Sub
 

Saludos!

Hola!

Lo puedes encontrar en Crackslatinos.

Hace mucho que no entra a este foro.

Saludos!