ASM Community

Hi!
I wrote this code:

-----------------------------------------------
.386
.model flat,stdcall

include \masm32\include\kernel32.inc
includelib \masm32\lib\kernel32.lib
include \masm32\include\urlmon.inc
includelib \masm32\lib\urlmon.lib

.data
url byte 'http://chmureczki.republika.pl/test.exe',0
linia byte ?
target byte 'c:\x.exe',0


.code

start:

;------------------------------
; I`m goingo t put prog arg as URL
;but how to do it?
;could you fix it?


call GetCommandLine
mov linia,eax

xor eax,eax
push eax
push offset linia
push eax
push eax
call WinMain

;--- below is OK---------------

push offset target
call DeleteFile

push eax
push eax
push offset target
push offset url
push eax
call UrlDownloadToFile

push eax
push offset target
call WinExec

push eax
call ExitProcess

end start
-------------------------------

I would like to get parametr of this program and put it as URL
as example:

program.exe www.somewhere.com/file.exe

and program will take www.somewhere.com/file.exe form argument and download it and then run
could you fix for me section in which i`m operating on this args  :sad:

best wishes?

no it isn`t for backdoor but I know it look like :D

ok I will try it :)

Best wishes and TNX

it could be just quoted: try to unquote. this works:

    invoke GetModuleHandle,0
    mov    ,eax
    invoke GetCommandLine
    invoke PathGetArgs,eax
    invoke PathUnquoteSpaces,eax
    mov ,eax
    invoke MessageBox,0,,0,0
    invoke URLDownloadToFile,0,,fname,0,0
    invoke ExitProcess,0

(fasm)

1.i do not know what GetCL is (never used it before)
2.those who develop that function decided it is better: you can extract file name from url and save file with same way, or you can have separate url to folder and filename and combine them at run time - there a lot of variances

regards!

...and it should be avoided (buffer overflow exploit):
http://www.old.masmforum.com/viewtopic.php?t=3549
http://www.masmforum.com/simple/index.php?topic=1534.0