flat assembler
Message board for the users of flat assembler.

Index > Macroinstructions > idata Macros (Edited)

Author
Thread Post new topic Reply to topic
hopcode



Joined: 04 Mar 2008
Posts: 563
Location: Germany
hopcode
Hallo All,
Updated version 15 Juni 2009
here samples and macros
http://board.flatassembler.net/topic.php?t=8941

I hope it will be useful!
Rgards,
hopcode


Last edited by hopcode on 15 Jun 2009, 19:27; edited 2 times in total
Post 15 Jul 2008, 02:23
View user's profile Send private message Visit poster's website Reply with quote
hopcode



Joined: 04 Mar 2008
Posts: 563
Location: Germany
hopcode
[size=14]
Hallo All,
Updated version 15 Juni 2009
here samples and macros
http://board.flatassembler.net/topic.php?t=8941

the only condition is to have the .idata declaration
at the beginning of the PE sections header before using it (in the code section)

hopcode[mrk]


Last edited by hopcode on 15 Jun 2009, 19:25; edited 1 time in total
Post 07 Sep 2008, 02:20
View user's profile Send private message Visit poster's website Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17714
Location: In your JS exploiting you and your system
revolution
There are already a few others have posted on this theme. I can't find it now, but you might like to search them out and compare. I remember Tomasz posted a single line macro to do it.
Post 07 Sep 2008, 02:27
View user's profile Send private message Visit poster's website Reply with quote
hopcode



Joined: 04 Mar 2008
Posts: 563
Location: Germany
hopcode
revolution wrote:
...a few others have posted on this theme..

Yes, i know the more of these posts. Very interesting. Perhaps you mean, in particular,
http://board.flatassembler.net/topic.php?t=5514.
2 times: Very interesting.
Anyway,
- 0.2 secs on kernel32.inc it is not so bad.(i can imagine a binary precompiled .inc to be read faster from the preprocessor)
- if i do not err, none of the solutions (except the one of mine) Cool makes no use of invoke/stdcall.
my code
Code:
 ...
 start:
     system cmd
     printf msg
     GetCommandLine
     push MB_ICONEXCLAMATION or MB_SYSTEMMODAL
     push eax
     printf msg3,eax
     SetConsoleTitle msg
     printf msg1
     _getch
     printf msg2,eax
     MessageBox HWND_DESKTOP,msg
 ret 
...
    

...readable,
.....understandable,
........simply, give me an hint...
...Fasmable
Very Happy
Post 07 Sep 2008, 03:08
View user's profile Send private message Visit poster's website Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17714
Location: In your JS exploiting you and your system
revolution
hopcode wrote:
revolution wrote:
...a few others have posted on this theme..

Yes, i know the more of these posts. Very interesting. Perhaps you mean, in particular,
http://board.flatassembler.net/topic.php?t=5514.
Nope, there are some posts doing just what you do by eliminating the invoke/stdcall completely. I think they are buried in other topics, kind of posted just-for-fun sort of things, so therefore difficult to find.
Post 07 Sep 2008, 04:02
View user's profile Send private message Visit poster's website Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar. Also on GitHub, YouTube, Twitter.

Website powered by rwasa.