ASM Community

section '.idata' import data readable writeable



  dd 0,0,0,RVA kernel_name,RVA kernel_table

  dd 0,0,0,RVA user_name,RVA user_table

  dd 0,0,0,0,0



  kernel_table:

    ExitProcess dd RVA _ExitProcess

    dd 0

  user_table:

    MessageBox dd RVA _MessageBoxA

    dd 0



  kernel_name db 'KERNEL32.DLL',0

  user_name db 'USER32.DLL',0



  _ExitProcess dw 0

    db 'ExitProcess',0

  _MessageBoxA dw 0

    db 'MessageBoxA',0

macro invoke proc,[arg]

 { common

    invoked equ invoked,proc

    if ~ arg eq

     stdcall [proc],arg

    else

     call [proc]

    end if }

macro library [name,string]

 { forward

    local _label

    if name#. <> -1

    dd 0,0,0,RVA _label,RVA name

    end if

   common

    dd 0,0,0,0,0

   forward

    if name#. <> -1

    _label db string,0

    end if }



macro import name,[label,string]

 { common

    name:

   forward

    if label in <invoked>

     local _label

     label dd RVA _label

    end if

   common

    name#. = $ - name - 1

    if $ > name

     dd 0

    end if

   forward

    if label in <invoked>

    _label dw 0

	   db string,0

    end if }

format PE GUI 4.0

entry start



include 'include\kernel.inc'

include 'include\user.inc'



include 'include\macro\stdcall.inc'

include 'include\macro\import.inc'



section '.data' data readable writeable



  caption db "Win32 Assembly",0

  message db "Hi! I'm general protection exception!",0



section '.code' code readable executable



  start:



	invoke	MessageBox,0,message,caption,MB_OK

	invoke	ExitProcess,0



section '.idata' import data readable writeable



  library kernel,'KERNEL32.DLL',\

	  user,'USER32.DLL',\

	  shell,'SHELL32.DLL',\

	  advapi,'ADVAPI32.DLL'



  import kernel,\

	 GetModuleHandle,'GetModuleHandleA',\

	 GetCommandLine,'GetCommandLineA',\

	 LoadLibrary,'LoadLibraryA',\

	 FreeLibrary,'FreeLibrary',\

	 VirtualAlloc,'VirtualAlloc',\

	 VirtualFree,'VirtualFree',\

	 CreateFile,'CreateFileA',\

	 GetFileSize,'GetFileSize',\

	 ReadFile,'ReadFile',\

	 WriteFile,'WriteFile',\

	 CloseHandle,'CloseHandle',\

	 SetCurrentDirectory,'SetCurrentDirectoryA',\

	 CreatePipe,'CreatePipe',\

	 DuplicateHandle,'DuplicateHandle',\

	 GetCurrentProcess,'GetCurrentProcess',\

	 CreateProcess,'CreateProcessA',\

	 GetExitCodeProcess,'GetExitCodeProcess',\

	 ExitProcess,'ExitProcess'



  import user,\

	 RegisterClass,'RegisterClassA',\

	 CreateWindowEx,'CreateWindowExA',\

	 DefFrameProc,'DefFrameProcA',\

	 DefMDIChildProc,'DefMDIChildProcA',\

	 GetWindowLong,'GetWindowLongA',\

	 SetWindowLong,'SetWindowLongA',\

	 MoveWindow,'MoveWindow',\

	 UpdateWindow,'UpdateWindow',\

	 GetMessage,'GetMessageA',\

	 TranslateMessage,'TranslateMessage',\

	 TranslateMDISysAccel,'TranslateMDISysAccel',\

	 TranslateAccelerator,'TranslateAcceleratorA',\

	 DispatchMessage,'DispatchMessageA',\

	 SendMessage,'SendMessageA',\

	 LoadCursor,'LoadCursorA',\

	 LoadIcon,'LoadIconA',\

	 LoadMenu,'LoadMenuA',\

	 GetSubMenu,'GetSubMenu',\

	 CheckMenuItem,'CheckMenuItem',\

	 EnableMenuItem,'EnableMenuItem',\

	 LoadAccelerators,'LoadAcceleratorsA',\

	 GetClientRect,'GetClientRect',\

	 GetWindowRect,'GetWindowRect',\

	 GetSystemMetrics,'GetSystemMetrics',\

	 GetWindowPlacement,'GetWindowPlacement',\

	 SetWindowPlacement,'SetWindowPlacement',\

	 SetFocus,'SetFocus',\

	 SetCursor,'SetCursor',\

	 MessageBox,'MessageBoxA',\

	 wvsprintf,'wvsprintfA',\

	 DialogBoxParam,'DialogBoxParamA',\

	 GetDlgItem,'GetDlgItem',\

	 GetDlgItemInt,'GetDlgItemInt',\

	 SetDlgItemText,'SetDlgItemTextA',\

	 GetDlgItemText,'GetDlgItemTextA',\

	 SendDlgItemMessage,'SendDlgItemMessageA',\

	 CheckDlgButton,'CheckDlgButton',\

	 IsDlgButtonChecked,'IsDlgButtonChecked',\

	 EnableWindow,'EnableWindow',\

	 EndDialog,'EndDialog',\

	 InvalidateRect,'InvalidateRect',\

	 WinHelp,'WinHelpA',\

	 PostQuitMessage,'PostQuitMessage'



  import shell,\

	 DragAcceptFiles,'DragAcceptFiles',\

	 DragQueryFile,'DragQueryFile',\

	 DragFinish,'DragFinish',\

	 Shell_NotifyIcon,'Shell_NotifyIcon'



  import advapi,\

	 RegCreateKeyEx,'RegCreateKeyExA',\

	 RegOpenKeyEx,'RegOpenKeyExA',\

	 RegSetValueEx,'RegSetValueExA',\

	 RegQueryValueEx,'RegQueryValueExA',\

	 RegCloseKey,'RegCloseKey'

 Imp Addr Hint Import Name from KERNEL32.DLL - Not Bound

 -------- ---- ---------------------------------------------------------------

 00003054    0 ExitProcess



 Imp Addr Hint Import Name from USER32.DLL - Not Bound

 -------- ---- ---------------------------------------------------------------

 0000306A    0 MessageBoxA



Disassembly



00402000                    start:

00402000 6A00                   push    0

00402002 6800104000             push    401000h

00402007 680F104000             push    40100Fh

0040200C 6A00                   push    0

0040200E FF156A304000           call    dword ptr [MessageBoxA]

00402014 6A00                   push    0

00402016 FF1554304000           call    dword ptr [ExitProcess]