seth1002

#include "stdafx.h"

#define DB(_val_) __asm __emit (_val_)

#define INVALID_SYSCALL (DWORD)(-1)

// code selectors
#define CS_32   0x23
#define CS_64   0x33

seth1002

############################################################################################
##
## Quick IDA Hex Bytes Copy
##
## All credit for logic and code chunks:
##      @tmr232 
##      https://github.com/tmr232/Sark
##
##      I simply removed dependencies and made it standalone.
## 

seth1002

#!/usr/bin/env python
################################################################################################
## UCL NRV2B Decompression Library
## 
## Code from "Clash of the Titans: ZeuS v SpyEye":
## https://www.sans.org/reading-room/whitepapers/malicious/clash-titans-zeus-spyeye-33393
## Author: Harshit Nayyar, harshit.nayyar@telus.com
##
## NOTE: This is the compression algorithm used in the Zeus trojan and subsequent variants
##