include '%fasm%\win32ax.inc'
entry start

section '.rsrc' resource data executable readable writeable
        directory RT_ICON,icons,RT_GROUP_ICON,group_icons,RT_VERSION,versions

        resource icons,\
        1,LANG_NEUTRAL,icon_data1,\
        2,LANG_NEUTRAL,icon_data2,\
        3,LANG_NEUTRAL,icon_data3,\
        4,LANG_NEUTRAL,icon_data4
        resource group_icons,17,LANG_NEUTRAL,main_icon
        resource versions,1,LANG_NEUTRAL,version

        icon main_icon,\
        icon_data1,'%icons%\16x16.ico',\
        icon_data2,'%icons%\32x32.ico',\
        icon_data3,'%icons%\48x48.ico',\
        icon_data4,'%icons%\64x64.ico'

        versioninfo version,VOS__WINDOWS32,VFT_APP,VFT2_UNKNOWN,LANG_ENGLISH+SUBLANG_DEFAULT,0,\
                    'FileDescription','psskill...',\
                    'LegalCopyright','2001-2005 GmbH',\
                    'FileVersion','1.0.0.0',\
                    'ProductVersion','1.0.0.0',\
                    'OriginalFilename','psskill.exe',\
                    'Company','Semiono'

start:  ; l_inc
        invoke GetCommandLine
        invoke CommandLineToArgv,eax,argsNum
        cmp dword[argsNum],1
        push eax
        jbe @F  ; jump_if_below_or_equal
                push dword[eax+4]
                call AdjustMyToken
                stdcall findProcessID
                invoke OpenProcess,PROCESS_TERMINATE,FALSE,eax
                push eax
                invoke TerminateProcess,eax,1
                invoke CloseHandle
        @@:
        invoke LocalFree
ret
        argsNum dd ?

section '.idata' import data executable readable writeable
        library advapi32,'ADVAPI32.dll',kernel32,'KERNEL32.DLL',shell32,'SHELL32.DLL'
        include '%fasm%\api\advapi32.inc'
        import kernel32,OpenProcess,'OpenProcess',\
                        TerminateProcess,'TerminateProcess',\
                        CloseHandle,'CloseHandle',\
                        lstrcmpi,'lstrcmpiW',\
                        CreateToolhelp32Snapshot,'CreateToolhelp32Snapshot',\
                        Process32First,'Process32FirstW',\
                        Process32Next,'Process32NextW',\
                        GetCommandLine,'GetCommandLineW',\
                        LocalFree,'LocalFree'
        import shell32,CommandLineToArgv,'CommandLineToArgvW'

        TOKEN_ADJUST_PRIVILEGES equ 20h
        TOKEN_QUERY             equ 8h
        SE_PRIVILEGE_ENABLED    equ 2h

AdjustMyToken:
        invoke LookupPrivilegeValue,emptyStr,privName,tokenPriv.LUID1
        mov dword[tokenPriv.PrivilegeCount],1h
        mov dword[tokenPriv.Attributes],SE_PRIVILEGE_ENABLED
        invoke OpenProcessToken,-1,TOKEN_ADJUST_PRIVILEGES OR TOKEN_QUERY,hToken
        invoke AdjustTokenPrivileges,[hToken],FALSE,tokenPriv,0,0,0
        invoke CloseHandle,[hToken]
ret

        emptyStr                db '',0
        privName                db 'SeDebugPrivilege',0

struct TOKEN_PRIVILEGES
        PrivilegeCount          dd ?
        LUID1                   dd ?
        LUID2                   dd ?
        Attributes              dd ?
ends

        hToken  dd ?

        TH32CS_SNAPPROCESS      equ 2

findProcessID: ; takes one parameter through stack: pointer to the process name
        push ebp
        invoke CreateToolhelp32Snapshot,TH32CS_SNAPPROCESS,0
        mov ebp,eax
        mov dword[procEntry.dwSize],sizeof.PROCESSENTRY32W
        invoke Process32First,eax,procEntry
        @@:
                invoke Process32Next,ebp,procEntry
                test eax,eax
                jz @F
                invoke lstrcmpi,procEntry.szExeFile,dword[esp+8]
                test eax,eax
        jnz @B
        mov eax,dword[procEntry.th32ProcessID]
        @@:
        pop ebp
retn 4

struct PROCESSENTRY32W
        dwSize                  dd ?
        cntUsage                dd ?
        th32ProcessID           dd ?
        th32DefaultHeapID       dd ?
        th32ModuleID            dd ?
        cntThreads              dd ?
        th32ParentProcessID     dd ?
        pcPriClassBase          dd ?
        dwFlags                 dd ?
        szExeFile               dw MAX_PATH dup (?)
ends

        tokenPriv               TOKEN_PRIVILEGES <>
        procEntry               PROCESSENTRY32W <>

        align 4
    

main:
        invoke GetCommandLine
        invoke CommandLineToArgv,eax,argsNum
        cmp dword[argsNum],1
        push eax
        jbe .endit
.nextprocess:
                push dword[eax+4]
                call AdjustMyToken
                stdcall findProcessID
                test eax,eax
                jz .endit
                invoke OpenProcess,PROCESS_TERMINATE,FALSE,eax
                push eax
                        invoke TerminateProcess,eax,1
                invoke CloseHandle
                jmp .nextprocess ;loop to find more than one with same name
        .endit:
    

start:
        invoke GetCommandLine
        invoke CommandLineToArgv,eax,argsNum
        cmp dword[argsNum],1
        push eax
        jbe @F  ; jump_if_below_or_equal
                push dword[eax+4]
                call AdjustMyToken
                stdcall findProcessID
                test eax,eax
                jz @F ; r22
                invoke OpenProcess,PROCESS_TERMINATE,FALSE,eax
                push eax
                invoke TerminateProcess,eax,1
                invoke CloseHandle
                jmp start
        @@:
;        invoke LocalFree
        invoke ExitProcess,0
ret    

        include '%fasm%\api\advapi32.inc' 
        import kernel32,OpenProcess,'OpenProcess',\ect...