Wednesday, April 25, 2012

[MASM] Shutdown System Directly

;Author SubhashDasyam
;Websites http://www.subhashdasyam.com
.386
.model flat, stdcall
option casemap:none
include \masm32\include\windows.inc
include \masm32\include\kernel32.inc
includelib \masm32\lib\kernel32.lib
include \masm32\include\ntdll.inc
includelib \masm32\lib\ntdll.lib
.data    
    ResFlag     db  0,0 
   
.code

start:
invoke RtlAdjustPrivilege,19,1,0,addr ResFlag ;adjust privileges accoding to the table down
invoke NtShutdownSystem,2  ;call NtShutDownSystem directly from ntdll.dll
end start

For better understand here is the table :) Happy Learning and Coding