.586? ? ? ? ? ? ? ? ? ? ? ?; create 32 bit code
.model flat, stdcall? ? ? ?; 32 bit memory model
OPTION CASEMAP:NONE? ? ? ? ? ? ? ? ? ?
? ?

include rc6.asm
include \masm32\include\windows.inc
include \masm32\include\user32.inc
include \masm32\include\kernel32.inc
include \masm32\include\masm32.inc
includelib \masm32\lib\user32.lib
includelib \masm32\lib\kernel32.lib
includelib \masm32\lib\masm32.lib



.data
strOllyClsName db "OLLYDBG",0
szOlly db " ?<???,???$ep?ON",0
caption? ?db "DAEMON",0
normal? ? db "not debugged!",0
deb? ? ? ?db "u are debugging me :)",0
fwin dd ?
Key ? ? ?db "jdy28lambcoplwerewaf23sdfcvxc",0
;Key? ? ? ? ? ? ?db 256 dup (0)
;Plaintext? ? ? ?db 16 dup (0)




? .data?
? SArray? ? ? ? ? db RC6_SIZEOFS dup? (?)
? PrE PROCESSENTRY32<>
? temp dd ?
? ExitCode dd ?
? handle dd ?
?
?
?
? .code
?

? ?

? ?
?
? Bugger_Bad:

? ? ? ? ? invoke? ? rc6_init,addr SArray,addr Key,16
? ? ?
? ? invoke? ? rc6_decrypt,addr SArray,addr szOlly
? ?

? invoke lstrcmp,addr PrE.szExeFile,addr szOlly
? .if eax==0
? invoke OpenProcess,PROCESS_ALL_ACCESS,TRUE,PrE.th32ProcessID
? mov handle,eax
?
? ? ? ?
? ? invoke TerminateProcess,handle,0
? ? ?Invoke ExitProcess,0
?
? ? ? ? .else
?
? ? ? ? invoke Process32Next,temp,addr PrE
?
?
? ? ? ? ? .endif
? jmp Bugger_Bad? ? ?
?
?
? I used tol's rc6 implementation and the decryption rountine just keeps running and running .. How can I stop it from running and continue with the rest of the code... This was just a test to see if it would work? ?:twisted:



This is not all of the code....
Posted on 2005-08-02 19:48:51 by shism2
maybe u forgot to pass it the size of the buffer?
Posted on 2005-08-02 20:03:21 by comrade