XProfan

DEF @LookupAccountName(7) !"advapi32","LookupAccountNameA"
DEF @LogonUser(6) !"advapi32","LogonUserA"
DEF @CreateProcessAsUser(11) !"advapi32","CreateProcessAsUserA"
DEF @SetLastError(1) !"kernel32","SetLastError"
DEF @GetLastError(0) !"kernel32","GetLastError" Liefert letzten API Fehler.
DEF @ZeroMemory(2) ! "Kernel32","RtlZeroMemory"
DEF @CloseHandle(1) !"kernel32","CloseHandle" Schließt una Handle (Programa).
DEF @CreateProcessWithLogonW(11) !"advapi32","CreateProcessWithLogonW"
DEF @MultiByteToWideChar(6) !"kernel32","MultiByteToWideChar"
DEF @GetACP(0) !"kernel32","GetACP"
Declarar Protokoll&,FEHLER&,DOMAIN$,SID_Size#,lpStartupInfo#,lpProcessInformation#
Declarar lpCommandLine#,DOMAINNAME_SIZE_ADDR#
Declarar SID#,DOMAIN#,SID_TYPE_INDICATOR#,DOMAIN#,Attribut#,ALLPRIVS#,COUNT#,SID#
DIM DOMAIN#,256
DIM SID#,800
DIM SID_Size#,4
DIM DOMAINNAME_SIZE_ADDR#,4
DIM SID_TYPE_INDICATOR#,256

Proc StartWithUserRights

    @ADDSTRING(Protokoll&,"Start el Procedimiento para Impersonifizieren otro User")
    Parámetros PUSERNAME$,PPASSWORT$,PPROGRAMM$
    Declarar PUSERNAME#,PPASSWORT#,PPROGRAMM#,Domainw#
    CLEAR SID#,DOMAIN#,SID_TYPE_INDICATOR#,DOMAIN#,SID#,DOMAINNAME_SIZE_ADDR#
    Largo SID_Size#,0=800
    LONG DOMAINNAME_SIZE_ADDR#,0=255
    LET Fehler&=@LookupAccountName(0,@addr(PUSERNAME$),SID#,SID_Size#,DOMAIN#,DOMAINNAME_SIZE_ADDR#,SID_TYPE_INDICATOR#)
    @ADDSTRING(Protokoll&,"Fehler LookupAccountName: "+@str$(Fehler&))
    LET DOMAIN$=@STRING$(DOMAIN#,0)
    @ADDSTRING(Protokoll&,"Domain: "+DOMAIN$)
    LET PPROGRAMM$=@ShortName$(PPROGRAMM$)
    DIM PPROGRAMM#,(@LEN(PPROGRAMM$)*2)+1
    DIM PUSERNAME#,(@LEN(PUSERNAME$)*2)+1
    DIM PPASSWORT#,(@LEN(PPASSWORT$)*2)+1
    DIM Domainw#,(@LEN(Domain$)*2)+1
    LET Fehler&=@MultiByteToWideChar(@GetACP(),2,@addr(PPROGRAMM$),-1,PPROGRAMM#,(@LEN(PPROGRAMM$)*2)+1)
    @ADDSTRING(Protokoll&,"Rückgabe de MultiByteToWideChar: "+@STR$(Fehler&))
    LET Fehler&=@MultiByteToWideChar(@GetACP(),2,@addr(Domain$),-1,Domainw#,(@LEN(Domain$)*2)+1)
    @ADDSTRING(Protokoll&,"Rückgabe de MultiByteToWideChar: "+@STR$(Fehler&))
    LET Fehler&=@MultiByteToWideChar(@GetACP(),2,@addr(PUSERNAME$),-1,PUSERNAME#,(@LEN(PUSERNAME$)*2)+1)
    @ADDSTRING(Protokoll&,"Rückgabe de MultiByteToWideChar: "+@STR$(Fehler&))
    LET Fehler&=@MultiByteToWideChar(@GetACP(),2,@addr(PPASSWORT$),-1,PPASSWORT#,(@LEN(PPASSWORT$)*2)+1)
    @ADDSTRING(Protokoll&,"Rückgabe de MultiByteToWideChar: "+@STR$(Fehler&))
    @SetLastError(0)
    @ADDSTRING(Protokoll&,"Letzter API Fehler: "+@str$(@GetLastError()))
    Dim lpStartupInfo#,68
    ZeroMemory(lpStartupinfo#,68)
    Largo lpStartupInfo#,0=68
    Dim lpProcessInformation#,16
    Dim lpCommandLine#,@len(PPROGRAMM$)+1
    ZeroMemory(lpProcessInformation#,16)
    String lpCommandLine#,0=PPROGRAMM$
    @CreateProcessWithLogonW(PUSERNAME#,Domainw#,PPASSWORT#,0,0,PPROGRAMM#,0,0,0,lpStartupInfo#,lpProcessInformation#)
    @ADDSTRING(Protokoll&,"Letzter API Fehler: "+@str$(@GetLastError()))
    Disponer Domainw#
    Disponer PPROGRAMM#
    Disponer PUSERNAME#
    Disponer PPASSWORT#
    Disponer lpStartupInfo#
    Disponer lpProcessInformation#
    Disponer lpCommandLine#
    @ADDSTRING(Protokoll&,"Ende el Procedimiento para Impersonifizieren otro User")

ENDPROC

CLS
LET Protokoll&=@createlistbox(%HWND,"",10,10,600,400)
StartWithUserRights @INPUT$("Bitte una Usernamen eingeben: ","Login Name?",""),@INPUT$("Bitte el Contraseña dazu eingeben: ","Passwort?",""),,@LoadFile$("EXE auswählen","*.EXE")
Disponer DOMAIN#
Disponer SID_Size#
Disponer DOMAINNAME_SIZE_ADDR#
Disponer SID_TYPE_INDICATOR#
Disponer SID#
Waitinput