The “Amazon Locker” experience

If you are an Amazon.com customer, then you might find the Amazon Locker delivery option very convenient.

In case you want to receive a package when you are out of town for instance, you can deliver it to a nearby locker.

When you receive the package, you will get an email containing the pickup code which you can use to open one of the lockers and get your package!

You might also like:

When Aliens invade earth!

This is my first painting ever. I did it during a painting night event at thepaintbar.com in Boston. I don’t claim that my painting is better than this one!

The two UFOs are my original touch. Can you imagine what would happen when aliens invade the earth during our lifetimes? ūüėČ

You might also like:

The Four Coins Magic Performance

Last summer, while visiting the Pike Market in downtown Seattle, I ran into a street magician. He let me film him while he performance his trick. Enjoy and don’t spoil the fun, you will be able to see his sleight of hand eventually ūüėČ

And you know what? You are absolutely right!

You might also like:

Delicious Insect dishes!

Some dishes I photographed during a summer visit to the Pacific Science Center in Seattle:

You might also like:

Hiew+ – Editing process memory with Hiew hex editor

What’s is Hiew+

Hiew+ is based on the FsPlus project. FsPlus is an implementation of an idea that allows you to access non disk files as if they were disk files. Hiew+ is a real life example of FsPlus where we take Hiew (an excellent hex editor) and turn it into an excellent process editor. Each process will be viewed as a file with a size as much as SYSTEM_INFO.lpMaximumApplicationAddress returns. In theory FsPlus should work with any hex editor to provide process memory editing, but this release is just Hiew ready.

Hiew+ editing the process memory of a process being debugged by IDA Pro

Usage

To use FsPlus, you need to inject FsPlus.dll into Hiew’s process memory¬†so that the APIs are hooked. After APIs are hooked, FsPlus will recognize and¬†treat in a different manner any file name that has the following form: “pid|1234” where 1234 is a given PID. To make the usage even simpler, I¬†provid a small GUI (FsPlusGui) to allow you launch Hiew conveniently.

In fact, Hiew+ can be considered as a nice addition to your reverse engineering tools arsenal (IDA Pro‘s debugger or any other debugger, etc.).

Here’s a screenshot of the¬†FsPlusGui:

You will need to double click on a process to have Hiew or the desired process launched with FsPlus support.
Make sure you specify the settings correctly in FsPlus.ini:

[settings]
title=Hiew+ (c) lallous <lallousz-x86@yahoo.com>
hookdll=.\fsPlus.dll
launch=c:\hiew\hiew32.exe

Features

After you run it successfully, you will be able to start editing processes as if you were editing files. The catch is every process virtual address is now a physical offset in Hiew.

Modules as IMAGE_SECTION_HEADERs

For your convenience we have created additional IMAGE_SECTION_HEADER structures in the PE header of the main process, so that each loaded module is view as a PE section:

Textual information about process’ modules

In addition to viewing modules as PE sections, you will have an actual representation of all loaded modules just after the end of the PE header:

flower separator
batchography-good-resDo you want to master Batch Files programming? Look no further, the Batchography is the right book for you.

Available in print or e-book editions from Amazon.
flower separator

No Read Errors

To avoid reading errors and such, any unreadable memory page is filled with “BAD!” pattern.

Physical and Logical disk editing

This is not something added by FsPlus, rather it is a undocumented feature of Hiew32 where you can use Hiew to edit/view logical and physical disk sectors:

Conclusion

Download – Release date: late 2008

This tool has been tested with Windows Vista (32) and Windows XP SP2 and with Hiew 7.29.
Hope you find this tool useful as Hiew itself.
Note:¬†Please don’t contact me if you run into trouble. This tool is no longer supported.

You might also like:

A visit to the Saint Charbel Monastery in Annaya, Lebanon

Charbel Makhlouf, also known as Saint Charbel in Annaya Lebanon is very famous amongst Maronite and Catholic Christians. Charbel is famous for his numerous miracles such as healing partial paralysis or eradicating cancer from patients.
It is customary for me and my family to visit Saint Charbel’s monastery once a year at least. In this blog post, I share with you some of the photos I took.


You might also like:

Take aways from the Defensive Driving Course

Recently, I took the 6 session defensive driving course. The following are some of the notes I extracted from the course that I would like to share with my you:

There were lots of information in the course, I highly recommend taking it! You can download the notes as a single PDF file from here:

(The PDF was created using the free Pic2Pdf tool)

The defensive driving formula


Continue reading