У нас вы можете посмотреть бесплатно pls help my struggling pe64 :( или скачать в максимальном доступном качестве, видео которое было загружено на ютуб. Для загрузки выберите вариант из формы ниже:
Если кнопки скачивания не
загрузились
НАЖМИТЕ ЗДЕСЬ или обновите страницу
Если возникают проблемы со скачиванием видео, пожалуйста напишите в поддержку по адресу внизу
страницы.
Спасибо за использование сервиса ClipSaver.ru
here the code: BITS 64 ORG 0 dos_header: db 'M','Z' ; 0x00 times 0x3A db 0 ; pad to 0x3C dd pe_header - $$ ; e_lfanew @ 0x3C ; ------------------------------------------------ ; WATERMARK hidden in DOS padding (loader ignores) ; ------------------------------------------------ watermark: db "lol. tryme",0 align 16 ; ------------- ; PE header ; ------------- pe_header: db 'P','E',0,0 ; COFF header dw 0x8664 ; Machine = AMD64 dw 1 ; NumberOfSections dd 0 ; TimeDateStamp dd 0 ; PointerToSymbolTable dd 0 ; NumberOfSymbols dw optional_end - optional_header dw 0x22 ; Characteristics (EXECUTABLE | LARGE_ADDRESS_AWARE) ; ---------------- ; Optional header ; ---------------- optional_header: dw 0x20B ; PE32+ db 0 ; MajorLinkerVersion db 0 ; MinorLinkerVersion dd section_end - section_start ; SizeOfCode dd 0 ; SizeOfInitializedData dd 0 ; SizeOfUninitializedData dd entry - section_start ; AddressOfEntryPoint dd section_start - $$ ; BaseOfCode dq 0x400000 ; ImageBase dd 16 ; SectionAlignment dd 16 ; FileAlignment // CURSE YOU PE64!!!!!! dw 6,0 ; OS version dw 0,0 ; Image version dw 6,0 ; Subsystem version dd 0 dd image_end - $$ ; SizeOfImage dd headers_end - $$ ; SizeOfHeaders dd 0 ; Checksum dw 2 ; Subsystem (GUI) dw 0x8000 ; remove DYNAMIC_BASE (0x40) ; DllCharacteristics dq 0x100000 ; StackReserve dq 0x1000 ; StackCommit dq 0x100000 ; HeapReserve dq 0x1000 ; HeapCommit dd 0 ; LoaderFlags dd 16 ; NumberOfRvaAndSizes ; Data directories (only import table used) ; Data directories dq import_dir - section_start + 0x1000, import_end - import_dir times 15 dq 0 optional_end: ; ---------------- ; Section header ; ---------------- section_header: db '.mangoes' dd section_end - section_start ; VirtualSize dd 0x1000 ; VirtualAddress dd section_end - section_start ; SizeOfRawData dd section_start - $$ ; PointerToRawData dd 0,0 dw 0,0 dd 0x60000020 ; dd 0x60000020 = RX | CODE ; dd 0xC0000040 = READ | WRITE | EXEC headers_end: align 16 ; ================= ; .mangoes section ; ================= align 16 section_start: entry: sub rsp, 40 xor ecx, ecx ; hWnd = NULL lea rdx, [rel msg] ; lpText lea r8, [rel caption] ; lpCaption xor r9d, r9d ; MB_OK mov rax, [rel MessageBoxA] ; RIP-relative call rax xor ecx, ecx mov rax, [rel RtlExitUserProcess] ; RIP-relative call rax msg db "i like mangoes",0 caption db "mango!!",0 ; ---------------- ; Import table ; ---------------- align 8 import_dir: dd ntdll_lookup - section_start + 0x1000 dd 0 dd 0 dd ntdll_name - section_start + 0x1000 dd ntdll_iat - section_start + 0x1000 dd user32_lookup - section_start + 0x1000 dd 0 dd 0 dd user32_name - section_start + 0x1000 dd user32_iat - section_start + 0x1000 ; null descriptor times 5 dd 0 ntdll_lookup: dq rtlexituserprocess_name - section_start + 0x1000 dq 0 ntdll_iat: RtlExitUserProcess: dq 0 dq 0 user32_lookup: dq messagebox_name - section_start + 0x1000 dq 0 user32_iat: ; IAT MessageBoxA: dq 0 dq 0 rtlexituserprocess_name: dw 0 db 'RtlExitUserProcess',0 messagebox_name: dw 0 db 'MessageBoxA',0 ntdll_name: db 'ntdll.dll',0 user32_name: db 'user32.dll',0 import_end: section_end: align 16 image_end: