main.c

一款压缩壳PE123的DELPHI源码 学习写壳的很好的参考

#define STRICT
#define MAINPROG                       // Place all unique variables here

#include <windows.h>
#include <stdio.h>
#include <string.h>
#include <ctype.h>
//#include <dir.h>
#include <math.h>
#include <float.h>
#pragma hdrstop

#include "disasm.h"
#include "vm.h"
#ifndef _RELEASEDLL
void main(void) {                      // Old form. So what?
  int i,j,n;
  ulong l;
  char *pasm;
  t_disasm da;
  t_asmmodel am;
  char s[TEXTLEN],errtext[TEXTLEN];

  // Demonstration of Disassembler.
  printf("Disassembler:\n");

  // Quickly determine size of command.
  l=Disasm("\x81\x05\xE0\x5A\x47\x00\x01\x00\x00\x00\x11\x22\x33\x44\x55\x66",
    10,0x400000,&da,DISASM_SIZE);
  printf("Size of command = %i bytes\n",l);

  // ADD [475AE0],1 MASM mode, lowercase, don't show default segment
 
  ideal=0; lowercase=1; putdefseg=0;
  l=Disasm("\x81\x05\xE0\x5A\x47\x00\x01\x00\x00\x00",
    10,0x400000,&da,DISASM_CODE);
  printf("%3i  %-24s  %-24s   (MASM)\n",l,da.dump,da.result);

  // ADD [475AE0],1 IDEAL mode, uppercase, show default segment
  ideal=1; lowercase=0; putdefseg=1;
  l=Disasm("\x81\x05\xE0\x5A\x47\x00\x01\x00\x00\x00",
    10,0x400000,&da,DISASM_CODE);
  printf("%3i  %-24s  %-24s   (IDEAL)\n",l,da.dump,da.result);

  // CALL 45187C
  l=Disasm("\xE8\x1F\x14\x00\x00",
    5,0x450458,&da,DISASM_CODE);
  printf("%3i  %-24s  %-24s   jmpconst=%08X\n",l,da.dump,da.result,da.jmpconst);

  // JNZ 450517
  l=Disasm("\x75\x72",
    2,0x4504A3,&da,DISASM_CODE);
  printf("%3i  %-24s  %-24s   jmpconst=%08X\n",l,da.dump,da.result,da.jmpconst);

  // Demonstration of Assembler.
  printf("\nAssembler:\n");

  // Assemble one of the commands above. First try form with 32-bit immediate.
  pasm="ADD [DWORD 475AE0],1";
  printf("%s:\n",pasm);
  j=Assemble(pasm,0x400000,&am,0,0,errtext);
  n=sprintf(s,"%3i  ",j);
  for (i=0; i<j; i++) n+=sprintf(s+n,"%02X ",am.code[i]);
  if (j<=0) sprintf(s+n,"  error=\"%s\"",errtext);
  printf("%s\n",s);

  // Then variant with 8-bit immediate constant.
  j=Assemble(pasm,0x400000,&am,0,2,errtext);
  n=sprintf(s,"%3i  ",j);
  for (i=0; i<j; i++) n+=sprintf(s+n,"%02X ",am.code[i]);
  if (j<=0) sprintf(s+n,"  error=\"%s\"",errtext);
  printf("%s\n",s);

  // Error, unable to determine size of operands.
  pasm="MOV [475AE0],1";
  printf("%s:\n",pasm);
  j=Assemble(pasm,0x400000,&am,0,4,errtext);
  n=sprintf(s,"%3i  ",j);
  for (i=0; i<j; i++) n+=sprintf(s+n,"%02X ",am.code[i]);
  if (j<=0) sprintf(s+n,"  error=\"%s\"",errtext);
  printf("%s\n",s);

  // Show results.
  Sleep(10000);
};
#else

BOOL APIENTRY DllMain( HMODULE hModule,
					  DWORD  ul_reason_for_call,
					  LPVOID lpReserved)
{
	switch (ul_reason_for_call)
	{
	case DLL_PROCESS_ATTACH:
		{
		}
		break;
	case DLL_THREAD_ATTACH:
		break;
	case DLL_THREAD_DETACH:
		break;
	case DLL_PROCESS_DETACH:
		break;
	}
	return TRUE;
}

void setideal(int _tideal)
{
	ideal = _tideal;	
}
void setlowercase(int _lowercase)
{
	lowercase = _lowercase;
}
void settabarguments(int _tabarguments)
{
	tabarguments = _tabarguments;
}
void setextraspace(int _extraspace)
{
	extraspace = _extraspace;
}
void setputdefseg(int _putdefseg)
{
	putdefseg = _putdefseg;
}
void setshowmemsize(int _showmemsize)  
{
	showmemsize = _showmemsize;
}
void setshownear(int _shownear)  
{
	shownear = _shownear;
}
void setshortstringcmds(int _shortstringcmds)
{
	shortstringcmds = _shortstringcmds;
}
void setsizesens(int _sizesens)
{
	sizesens = _sizesens;
}
void setsymbolic(int _symbolic) 
{	
	symbolic = _symbolic;
}
void setfarcalls(int _farcalls)
{
	farcalls = _farcalls;
}
void setdecodevxd(int _decodevxd) 
{
	decodevxd = _decodevxd;
}
void setprivileged(int _privileged)
{
	privileged = _privileged;
}
void setiocommand(int _iocommand)
{
	iocommand = _iocommand;
}
void setbadshift(int _badshift)  
{
	badshift = _badshift;
}
void setextraprefix(int _extraprefix) 
{
	extraprefix = _extraprefix;
}
void setlockedbus(int _lockedbus)
{
	lockedbus = _lockedbus;
}
void setstackalign(int _stackalign) 
{
	stackalign = _stackalign;
}
void setiswindowsnt(int _iswindowsnt) 
{
	iswindowsnt = _iswindowsnt;
}


#endif