flat assembler
Message board for the users of flat assembler.
![]() |
Author |
|
revolution
Parameters are pushed in reverse order. And the call target is indirect.
Code: push FIND_STRUCT push file_extension call [FindFirstFile] |
|||
![]() |
|
neville
jhonny6721 has admitted he is "researching" computer viruses.
Perhaps it can now be inferred that his research might be "delivered" via .fly email files. _________________ FAMOS - the first memory operating system |
|||
![]() |
|
revolution
Must be a fishing program? Or perhaps an insect database? An airline booking system? Trouser zipper failure analysis?
|
|||
![]() |
|
alexfru
Invoke GetProcAddress() to obtain the address of FindFirstFile(). Then call it.
Other than that, you'd probably need to construct the .EXE manually or analyze it in memory (i.e. find the import table and the address of FindFirstFile() in it). |
|||
![]() |
|
revolution
alexfru wrote: Invoke GetProcAddress() to obtain the address of FindFirstFile(). Then call it. |
|||
![]() |
|
DOS386
> How to call WINAPI without use Invoke???
Lowest level: http://board.flatassembler.net/topic.php?t=11170 |
|||
![]() |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2020, Tomasz Grysztar. Also on GitHub, YouTube, Twitter.
Website powered by rwasa.