XPost: alt.windows7.general   
   From: nospam@needed.invalid   
      
   Herbert Kleebauer wrote:   
   > On 21.09.2018 17:17, pyotr filipivich wrote:   
   >> Herbert Kleebauer  on Thu, 20 Sep 2018 21:58:37 +0200   
   >> typed in alt.windows7.general  the following:   
   >   
   >>> The source code:   
   >>>   
   >>> winmain::   
   >>>   
   >>>         jsr.l   (GetCommandLine)   
   >   
   >>   
   >>     Hmmm - where/how do I put/use/invoke this?   
   >   
   > Just execute the posted batch file. The binary of the   
   > program is generated on the fly from the batch code   
   > (using certutil to decode the base64 data at the end   
   > of the file). Remove the "del settitle.exe" line if   
   > you want to save the exe file.   
   >   
   >   
      
   This is the base64 stuff decoded.   
      
   https://i.postimg.cc/9FkYL8cn/hexdump.gif   
      
   I used this for base64 to binary.   
      
   https://www.base64decode.org/#decodefiles   
      
   And this for trying a few opcodes to sync up to what   
   might be the code portion.   
      
   https://defuse.ca/online-x86-assembler.htm#disassembly2   
      
   No idea what it does, but that's a start at analysis.   
      
       Paul   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)