ASM Injector source

tarafından **Hello EMO** Ptsi Kas. 29, 2010 2:43 am

Kod:: ; DLL Injector 2007 by GameDeception .486 .model flat, stdcall option casemap: none include windows.inc include kernel32.inc include masm32.inc includelib kernel32.lib includelib masm32.lib .data StartupInfo STARTUPINFO {SIZEOF STARTUPINFO} ModuleName db "kernel32.dll", 0 ProcName db "LoadLibraryA", 0 .data? Buffer db 128 dup (?) Buffer2 db 128 dup (?) Buffer3 db 128 dup (?) ProcessInfo PROCESS_INFORMATION {} .code start: invoke getcl_ex, 1, OFFSET Buffer invoke getcl_ex, 2, OFFSET Buffer2 invoke GetPathOnly, OFFSET Buffer, OFFSET Buffer3 invoke CreateProcess, OFFSET Buffer, OFFSET Buffer2, NULL, NULL, FALSE, 0, NULL, OFFSET Buffer3, OFFSET StartupInfo, OFFSET ProcessInfo invoke getcl_ex, 3, OFFSET Buffer invoke StrLen, OFFSET Buffer lea ebx, [eax + 1] invoke VirtualAllocEx, ProcessInfo.hProcess, NULL, ebx, MEM_COMMIT, PAGE_READWRITE mov edi, eax invoke WriteProcessMemory, ProcessInfo.hProcess, eax, OFFSET Buffer, ebx, NULL invoke GetModuleHandle, OFFSET ModuleName invoke GetProcAddress, eax, OFFSET ProcName invoke CreateRemoteThread, ProcessInfo.hProcess, NULL, 0, eax, edi, 0, NULL invoke WaitForSingleObject, eax, INFINITE invoke VirtualFreeEx, ProcessInfo.hProcess, edi, 0, MEM_RELEASE ret end start