easyunpack.inc

也算是一个通用脱壳软件吧

;========================
; 一块三毛钱
; 2004.3.16
;========================

include windows.inc
include kernel32.inc
include user32.inc
include gdi32.inc
include Comctl32.inc
include comdlg32.inc
include shell32.inc
include macros.inc
include masm32.inc

includelib kernel32.lib
includelib user32.lib
includelib gdi32.lib
includelib Comctl32.lib
includelib comdlg32.lib
includelib shell32.lib
includelib masm32.lib

DlgProc proto :HWND,:UINT,:WPARAM,:LPARAM
EditWndProc proto :HWND,:UINT,:WPARAM,:LPARAM
_Init   proto :DWORD
_Paint  proto :DWORD
_Command proto :DWORD,:DWORD,:DWORD
_Unpack proto :DWORD
_OutputInfo proto :DWORD, :DWORD
_GetOEP proto :DWORD,:DWORD
_InString proto :DWORD,:DWORD,:DWORD,:DWORD
_Dump   proto :DWORD,:DWORD,:DWORD,:DWORD
_DumpFix proto :DWORD,:DWORD
_RebuildPE proto :DWORD

.data
        g_szFilter      db  "可执行文件(*.exe)",0,"*.exe",0,0
        g_szOpenTitle   db  "选择要脱壳的文件...",0
        g_szSaveTitle   db  "保存脱壳后的文件...",0
        g_szDumpedName  db  "dumped.exe",0
        
        g_Delphi_Signs  db  55h, 8Bh, 0ECh, 83h, 0C4h, 0, 53h, 0B8h, 0, 0, 0, 0, 0E8h, 0, 0,
                            0, 0, 8Bh, 1Dh, 0, 0, 0, 0, 8Bh, 3h, 0E8h, 0, 0, 0, 0, 8Bh, 3h
        g_VC6_Signs     db  55h, 8Bh, 0ECh, 6Ah, 0FFh, 68h, 0, 0, 0, 0, 68h, 0, 0, 0, 0, 64h,
                            0A1h, 0, 0, 0, 0, 50h, 64h, 89h, 25h, 0, 0, 0, 0

.data?
        g_hInst         dd  ?
        g_hFont         dd  ?
        g_buffer        db  1024 dup (?)
        
        g_hFileCtl      dd  ?
        g_hOutputCtl    dd  ?
        g_hRebIAT       dd  ?
        g_hOptFile      dd  ?
        g_hChkOEP       dd  ?
        g_hOEP          dd  ?
        
        g_ofn           OPENFILENAME <?>
        g_lpOldWndProc  dd  ?
        
        align dword
        g_context       CONTEXT <?>
        
        g_lpRebuildImport       dd  ?
        
.const
        DLG_MAIN                equ     1000
        IDC_GROUP               equ     1001
        IDC_FILE                equ     1002
        IDC_BTN_OPENFILE        equ     1003
        IDC_OUTPUT              equ     1004
        IDC_CHK_REBUILDIAT      equ     1005
        IDC_CHK_OPTIMIZEFILE    equ     1006
        IDC_CHK_OEP             equ     1007
        IDC_OEP                 equ     1008
        IDC_BTN_START           equ     1009
        IDI_MAIN                equ     900