⭐ 欢迎来到虫虫下载站！ | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站
📤 上传资源

📄 web安全扫描器.asm

📁 采用win32汇编语言编写的一个脚本木马查杀工具。利用内存读取的扫描方式
💻 ASM
📖 第 1 页 / 共 3 页
字号:
🔍
123 
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer11,_lpszFile
invoke lstrcat,addr lpBuffer11,addr sz11k
invoke lstrcat,addr lpBuffer11,addr szk
invoke lstrlen,addr lpBuffer11
mov hSize11,eax
invoke WriteFile,hFile,addr lpBuffer11,hSize11,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

  mov  ecx, @dwFileSize
  sub  ecx,13; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz12
  push ecx
  push esi
  mov  ecx,14  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer12,_lpszFile
invoke lstrcat,addr lpBuffer12,addr sz12l
invoke lstrcat,addr lpBuffer12,addr szl
invoke lstrlen,addr lpBuffer12
mov hSize12,eax
invoke WriteFile,hFile,addr lpBuffer12,hSize12,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

  mov  ecx, @dwFileSize
  sub  ecx,2; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz13
  push ecx
  push esi
  mov  ecx,3  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer13,_lpszFile
invoke lstrcat,addr lpBuffer13,addr sz13m
invoke lstrcat,addr lpBuffer13,addr szm
invoke lstrlen,addr lpBuffer13
mov hSize13,eax
invoke WriteFile,hFile,addr lpBuffer13,hSize13,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

  mov  ecx, @dwFileSize
  sub  ecx,15; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz14
  push ecx
  push esi
  mov  ecx,16  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer14,_lpszFile
invoke lstrcat,addr lpBuffer14,addr sz14n
invoke lstrcat,addr lpBuffer14,addr szn
invoke lstrlen,addr lpBuffer14
mov hSize14,eax
invoke WriteFile,hFile,addr lpBuffer14,hSize14,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif


 mov  ecx, @dwFileSize
  sub  ecx,12; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz15
  push ecx
  push esi
  mov  ecx,13  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer15,_lpszFile
invoke lstrcat,addr lpBuffer15,addr sz15o
invoke lstrcat,addr lpBuffer15,addr szo
invoke lstrlen,addr lpBuffer15
mov hSize15,eax
invoke WriteFile,hFile,addr lpBuffer15,hSize15,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,10; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz16
  push ecx
  push esi
  mov  ecx,11  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer16,_lpszFile
invoke lstrcat,addr lpBuffer16,addr sz16p
invoke lstrcat,addr lpBuffer16,addr szp
invoke lstrlen,addr lpBuffer16
mov hSize16,eax
invoke WriteFile,hFile,addr lpBuffer16,hSize16,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,25; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz17
  push ecx
  push esi
  mov  ecx,26  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer17,_lpszFile
invoke lstrcat,addr lpBuffer17,addr sz17q
invoke lstrcat,addr lpBuffer17,addr szq
invoke lstrlen,addr lpBuffer17
mov hSize17,eax
invoke WriteFile,hFile,addr lpBuffer17,hSize17,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,14; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz18
  push ecx
  push esi
  mov  ecx,15  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer18,_lpszFile
invoke lstrcat,addr lpBuffer18,addr sz18x
invoke lstrcat,addr lpBuffer18,addr szx
invoke lstrlen,addr lpBuffer18
mov hSize18,eax
invoke WriteFile,hFile,addr lpBuffer18,hSize18,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,29; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz19
  push ecx
  push esi
  mov  ecx,30  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer19,_lpszFile
invoke lstrcat,addr lpBuffer19,addr sz19y
invoke lstrcat,addr lpBuffer19,addr szy
invoke lstrlen,addr lpBuffer19
mov hSize19,eax
invoke WriteFile,hFile,addr lpBuffer19,hSize19,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,30; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz20
  push ecx
  push esi
  mov  ecx,31  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer20,_lpszFile
invoke lstrcat,addr lpBuffer20,addr sz20z
invoke lstrcat,addr lpBuffer20,addr szz
invoke lstrlen,addr lpBuffer20
mov hSize20,eax
invoke WriteFile,hFile,addr lpBuffer20,hSize20,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,30; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz21
  push ecx
  push esi
  mov  ecx,31  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer21,_lpszFile
invoke lstrcat,addr lpBuffer21,addr sz21a
invoke lstrcat,addr lpBuffer21,addr sz21b
invoke lstrlen,addr lpBuffer21
mov hSize21,eax
invoke WriteFile,hFile,addr lpBuffer21,hSize21,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,29; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz22
  push ecx
  push esi
  mov  ecx,30  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer22,_lpszFile
invoke lstrcat,addr lpBuffer22,addr sz22a
invoke lstrcat,addr lpBuffer22,addr sz22b
invoke lstrlen,addr lpBuffer22
mov hSize22,eax
invoke WriteFile,hFile,addr lpBuffer22,hSize22,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
 mov  ecx, @dwFileSize
  sub  ecx,11; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz23
  push ecx
  push esi
  mov  ecx,12  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
  je  @f
  inc  esi
  loop @b
@@:
.if ecx != 0
invoke  CreateFile,addr szLogFile,GENERIC_WRITE,FILE_SHARE_READ,\
            0,OPEN_ALWAYS,FILE_ATTRIBUTE_NORMAL,0
            mov hFile,eax
.if eax != NULL   
invoke lstrcat,addr lpBuffer23,_lpszFile
invoke lstrcat,addr lpBuffer23,addr sz23a
invoke lstrcat,addr lpBuffer23,addr sz23b
invoke lstrlen,addr lpBuffer23
mov hSize23,eax
invoke WriteFile,hFile,addr lpBuffer23,hSize23,addr lpNumberOfBytesRead,NULL
invoke CloseHandle,hFile
.endif
.endif

 mov  ecx, @dwFileSize
  sub  ecx,18; 子字符串长度减 1
  mov  esi, @lpMemory
@@:
  mov  edi, offset sz24
  push ecx
  push esi
  mov  ecx,19  ; 子字符串长度
  repe cmpsb
  pop  esi
  pop  ecx
123

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -