idata Macros (Edited)

Index > Macroinstructions > idata Macros (Edited)

Author

Thread

hopcode

Joined: 04 Mar 2008
Posts: 563
Location: Germany

hopcode 15 Jul 2008, 02:23

Hallo All,
Updated version 15 Juni 2009
here samples and macros
http://board.flatassembler.net/topic.php?t=8941

I hope it will be useful!
Rgards,
hopcode

Last edited by hopcode on 15 Jun 2009, 19:27; edited 2 times in total

15 Jul 2008, 02:23

hopcode

Joined: 04 Mar 2008
Posts: 563
Location: Germany

hopcode 07 Sep 2008, 02:20

[size=14]
Hallo All,
Updated version 15 Juni 2009
here samples and macros
http://board.flatassembler.net/topic.php?t=8941

the only condition is to have the .idata declaration
at the beginning of the PE sections header before using it (in the code section)

hopcode[mrk]

Last edited by hopcode on 15 Jun 2009, 19:25; edited 1 time in total

07 Sep 2008, 02:20

revolution
When all else fails, read the source

Joined: 24 Aug 2004
Posts: 20300
Location: In your JS exploiting you and your system

revolution 07 Sep 2008, 02:27

There are already a few others have posted on this theme. I can't find it now, but you might like to search them out and compare. I remember Tomasz posted a single line macro to do it.

07 Sep 2008, 02:27

hopcode

Joined: 04 Mar 2008
Posts: 563
Location: Germany

hopcode 07 Sep 2008, 03:08

revolution wrote:

...a few others have posted on this theme..

Yes, i know the more of these posts. Very interesting. Perhaps you mean, in particular,
http://board.flatassembler.net/topic.php?t=5514.
2 times: Very interesting.
Anyway,
- 0.2 secs on kernel32.inc it is not so bad.(i can imagine a binary precompiled .inc to be read faster from the preprocessor)
- if i do not err, none of the solutions (except the one of mine) Cool

makes no use of invoke/stdcall.
my code

Code:

 ...
 start:
     system cmd
     printf msg
     GetCommandLine
     push MB_ICONEXCLAMATION or MB_SYSTEMMODAL
     push eax
     printf msg3,eax
     SetConsoleTitle msg
     printf msg1
     _getch
     printf msg2,eax
     MessageBox HWND_DESKTOP,msg
 ret 
...

...readable,
.....understandable,
........simply, give me an hint...
...Fasmable
Very Happy

07 Sep 2008, 03:08

revolution
When all else fails, read the source

Joined: 24 Aug 2004
Posts: 20300
Location: In your JS exploiting you and your system

revolution 07 Sep 2008, 04:02

hopcode wrote:

revolution wrote:
...a few others have posted on this theme..

Yes, i know the more of these posts. Very interesting. Perhaps you mean, in particular,
http://board.flatassembler.net/topic.php?t=5514.

Nope, there are some posts doing just what you do by eliminating the invoke/stdcall completely. I think they are buried in other topics, kind of posted just-for-fun sort of things, so therefore difficult to find.

07 Sep 2008, 04:02

< Last Thread | Next Thread >

Forum Rules:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum