[fasmg] w64g00.asm, a bare-bones Win64 console program

flat assembler
Message board for the users of flat assembler.

Index > Windows > [fasmg] w64g00.asm, a bare-bones Win64 console program

Author

Thread

yeohhs

Joined: 19 Jan 2004
Posts: 195
Location: N 5.43564° E 100.3091°

yeohhs 07 Jan 2018, 10:21

Code:

;===============================================================================
;Program : w64g00
;Version : 0.0.1
;Author  : Yeoh HS
;Date    : 7 January 2018
;Purpose : a bare-bones Win64 console program. 
;fasmg   : i17sx
;===============================================================================
include 'format/format.inc'

format PE64 Console
entry start

section '.text' code readable executable

  start:
        sub     rsp,8*5         
    
        xor    ecx, ecx                        ; not  push      0
        call    [ExitProcess]

section '.idata' import data readable writeable

  dd 0,0,0,RVA kernel_name,RVA kernel_table
  dd 0,0,0,0,0

  kernel_table:
    ExitProcess dq RVA _ExitProcess
    dq 0
    
  kernel_name db 'Kernel32.dll',0
  
  _ExitProcess dw 0
    db 'ExitProcess',0

Last edited by yeohhs on 07 Jan 2018, 12:43; edited 1 time in total

07 Jan 2018, 10:21

revolution
When all else fails, read the source

Joined: 24 Aug 2004
Posts: 20761
Location: In your JS exploiting you and your system

revolution 07 Jan 2018, 12:27

Instead of "push 0" you should put the value into RCX.

Code:

xor ecx,ecx
call [ExitProcess]

07 Jan 2018, 12:27

yeohhs

Joined: 19 Jan 2004
Posts: 195
Location: N 5.43564° E 100.3091°

yeohhs 07 Jan 2018, 12:39

Thanks!

07 Jan 2018, 12:39

< Last Thread | Next Thread >

Forum Rules:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum