fileload.cpp

将exe等可执行文件转化成c程序的反编译程序,先到汇编再到c

				for ( j=0;j<expdir->numfunctions;j++ )
				{
					if ( !chktable[j] )
					{
						DWORD numtmp=j+expdir->base;
						wsprintf(inum,"%02d",numtmp);
						lstrcpyn(impbuff,(char *)expname,GNAME_MAXLEN-8);
						k=0;
						while ( (impbuff[k])&&(k<GNAME_MAXLEN-8) )
						{
							if ( impbuff[k]=='.' )break;
							k++;
						}
						strcpy(&impbuff[k],"::ord_");
						strcat(impbuff,inum);
						char* newimpname=new char[strlen(impbuff)+1];
						strcpy(newimpname,impbuff);
						if ( fnaddr[j] )
						{
							t.assign(SEG0,fnaddr[j]+peh->image_base);
							//scheduler.addtask(dis_ordexport,priority_export,t,newimpname);
							//scheduler.addtask(dis_code,priority_definitecode,t,NULL);
						}
					}
				}
			}
			delete chktable;
		}
		if ( (pdata[i].rva==peh->importtable_rva) // import info
			 ||((peh->importtable_rva>pdata[i].rva)&&(peh->importtable_rva<pdata[i].rva+pdata[i].phys_size)) )
		{
			DWORD *imphint,impaddr,impaddr2;
			BYTE* impname;
			peimportdirentry *impdir;
			impdir=(peimportdirentry *)&fbuff[pdata[i].phys_offset+peh->importtable_rva-pdata[i].rva];
			DWORD j=0;
			while ( impdir[j].firstthunkrva )
			{
				t.assign(SEG0,
						 peh->image_base+peh->importtable_rva+j*sizeof(struct peimportdirentry));
				//scheduler.addtask(dis_datadword,priority_data,t,NULL);
				//scheduler.addtask(dis_datadword,priority_data,t+4,NULL);
				//scheduler.addtask(dis_datadword,priority_data,t+8,NULL);
				//scheduler.addtask(dis_datadword,priority_data,t+12,NULL);
				//scheduler.addtask(dis_datadword,priority_data,t+16,NULL);
				for ( int k1=0;k1<peh->objects;k1++ )
				{
					if ( (impdir[j].namerva>=pdata[k1].rva)&&(impdir[j].namerva<pdata[k1].rva+pdata[k1].phys_size) )
					{
						impname=&fbuff[impdir[j].namerva-pdata[k1].rva+pdata[k1].phys_offset];
						break;
					}
				}
				t.assign(SEG0,impdir[j].namerva+peh->image_base);
				//scheduler.addtask(dis_datastring,priority_data,t,NULL);

				DWORD thunkrva;
				if ( !impdir[j].originalthunkrva )
					thunkrva=impdir[j].firstthunkrva;
				else
					thunkrva=impdir[j].originalthunkrva;
				for ( k=0;k<peh->objects;k++ )
				{
					if ( (thunkrva>=pdata[k].rva)&&(thunkrva<pdata[k].rva+pdata[k].phys_size) )
					{
						imphint=(DWORD *)&fbuff[thunkrva-pdata[k].rva+pdata[k].phys_offset];
						break;
					}
				}
				impaddr=impdir[j].firstthunkrva+peh->image_base;
				impaddr2=impdir[j].originalthunkrva+peh->image_base;
				while ( *imphint )
				{
					if ( (*imphint)&0x80000000 )
					{
						DWORD numtmp=(*imphint)&0x7fffffff;
						wsprintf(inum,"%02d",numtmp);
						strcpy(impbuff,(char *)impname);
						k=0;
						while ( impbuff[k] )
						{
							if ( impbuff[k]=='.' )break;
							k++;
						}
						strcpy(&impbuff[k],"::ord_");
						strcat(impbuff,inum);
						char* newimpname=new char[strlen(impbuff)+1];
						strcpy(newimpname,impbuff);
						t.assign(SEG0,impaddr);
						//scheduler.addtask(dis_ordimport,priority_import,t,newimpname);
					}
					else
					{
						t.assign(SEG0,impaddr);
						//scheduler.addtask(dis_import,priority_import,t,(char *)&fbuff[(*imphint)+2+pdata[k1].phys_offset-pdata[k1].rva]);
					}
					t.assign(SEG0,peh->image_base+(*imphint));
					//scheduler.addtask(dis_dataword,priority_data,t,NULL);
					//scheduler.addtask(dis_datastring,priority_data,t+2,NULL);
					t.assign(SEG0,impaddr);
					//scheduler.addtask(dis_datadword,priority_data,t,NULL);
					t.assign(SEG0,impaddr2);
					//scheduler.addtask(dis_datadword,priority_data,t,NULL);
					imphint++;
					impaddr+=4;
					impaddr2+=4;
				}
				t.assign(SEG0,impaddr);
				//scheduler.addtask(dis_datadword,priority_data,t,NULL);
				t.assign(SEG0,impaddr2);
				//scheduler.addtask(dis_datadword,priority_data,t,NULL);
				j++;
			}
			t.assign(SEG0,
					 peh->image_base+peh->importtable_rva+j*sizeof(struct peimportdirentry));
			//scheduler.addtask(dis_datadword,priority_data,t,NULL);
			//scheduler.addtask(dis_datadword,priority_data,t+4,NULL);
			//scheduler.addtask(dis_datadword,priority_data,t+8,NULL);
			//scheduler.addtask(dis_datadword,priority_data,t+12,NULL);
			//scheduler.addtask(dis_datadword,priority_data,t+16,NULL);
		}
		if ( pdata[i].rva==peh->tls_rva )
			peobjdone=TRUE; // tls info
		if ( (pdata[i].rva == peh->resourcetable_rva)	||// resource info
			 ((peh->resourcetable_rva > pdata[i].rva) &&
			  (peh->resourcetable_rva < pdata[i].rva+pdata[i].phys_size)) )
		{ // RESOURCE_DATA;
			if ( (pdata[i].phys_size)&& Load_Resources )
			{
				perestable *resdir;
				resdir=(perestable *)&fbuff[pdata[i].phys_offset+peh->resourcetable_rva-pdata[i].rva];
				pdatarva=peh->resourcetable_rva;  // bugfix  build 14
				rawdata=(BYTE *)resdir;
				DWORD numitems=resdir->numnames+resdir->numids;
				perestableentry *rentry = (struct perestableentry *)(resdir+1);
				while ( numitems )
				{
					if ( (rentry->id)&0x80000000 )
					{
						BYTE* impname=rawdata+((rentry->id)&0x7fffffff);
						int clen=((WORD *)impname)[0];
						WideCharToMultiByte(CP_ACP,0,(const wchar_t *)(impname+2),clen,impbuff,100,NULL,NULL);
						impbuff[clen]=0;
					}
					else
					{
						switch ( rentry->id )
						{
						case 1:                  strcpy(impbuff,"Cursor");
							break;
						case 2:                  strcpy(impbuff,"Bitmap");
							break;
						case 3:                  strcpy(impbuff,"Icon");
							break;
						case 4:                  strcpy(impbuff,"Menu");
							break;
						case 5:                  strcpy(impbuff,"Dialog");
							break;
						case 6:                  strcpy(impbuff,"String Table");
							break;
						case 7:                  strcpy(impbuff,"Font Directory");
							break;
						case 8:                  strcpy(impbuff,"Font");
							break;
						case 9:                  strcpy(impbuff,"Accelerators");
							break;
						case 10:                  strcpy(impbuff,"Unformatted Resource Data");
							break;
						case 11:                  strcpy(impbuff,"Message Table");
							break;
						case 12:                  strcpy(impbuff,"Group Cursor");
							break;
						case 14:                  strcpy(impbuff,"Group Icon");
							break;
						case 16:                  strcpy(impbuff,"Version Information");
							break;
						case 0x2002:                  strcpy(impbuff,"New Bitmap");
							break;
						case 0x2004:                  strcpy(impbuff,"New Menu");
							break;
						case 0x2005:                  strcpy(impbuff,"New Dialog");
							break;
						default:
							strcpy(impbuff,"User Defined Id:");
							DWORD numtmp=rentry->id&0x7fffffff;
							wsprintf(inum,"%02lx",numtmp);
							strcat(impbuff,inum);
							break;
						}
					}
					if ( rentry->offset&0x80000000 )
					{
						//subdirsummary(rawdata+((rentry->offset)&0x7fffffff),impbuff,peh->image_base);
					}
					else
					{
						//leafnodesummary(rawdata+((rentry->offset)&0x7fffffff),impbuff,peh->image_base);
					}
					rentry++;
					numitems--;
				}
			}
			if ( pdata[i].rva==peh->resourcetable_rva )peobjdone=TRUE;
		}
		if ( pdata[i].rva==peh->fixuptable_rva ) // fixup info
		{
			perelocheader *per=(perelocheader *)&fbuff[pdata[i].phys_offset];
			while ( per->rva )
			{
				WORD* rdata=(WORD *)per+sizeof(perelocheader)/2;
				DWORD numrelocs=(per->len-sizeof(perelocheader))/2;
				while ( (numrelocs)&&(rdata[0]) )
				{
					t.assign(SEG0,((DWORD)(rdata[0])&0x0fff)+per->rva+peh->image_base);
					//reloc.addreloc(t,RELOC_NONE);
					rdata++;
					numrelocs--;
				}
				per=(perelocheader *)((BYTE *)(per)+per->len);
			}
			peobjdone=TRUE;
		}
		if ( pdata[i].rva==peh->debugtable_rva ) // debug info
		{
			// DEBUG_DATA;
			if ( (pdata[i].phys_size)&& Load_Debug )
			{
				sseg.offs=pdata[i].rva+peh->image_base;
				//dta.addseg(sseg,pdata[i].phys_size,&fbuff[pdata[i].phys_offset],debugdata,NULL);
			}
			peobjdone=TRUE;
		}
		if ( (pdata[i].obj_flags&0x40)&&(!(pdata[i].obj_flags&0x20))&&(!peobjdone) )
		{ // INIT_DATA;
			if ( (pdata[i].phys_size)&& Load_Data )
			{
				sseg.offs=pdata[i].rva+peh->image_base;
				//dta.addseg(sseg,pdata[i].phys_size,&fbuff[pdata[i].phys_offset],data32,NULL);
			}
			if ( (pdata[i].virt_size>pdata[i].phys_size)&& Load_Data )
			{
				sseg.offs=pdata[i].rva+peh->image_base+pdata[i].phys_size;
				BYTE* uinit=new BYTE[pdata[i].virt_size-pdata[i].phys_size];
				for ( DWORD j=0;j<pdata[i].virt_size-pdata[i].phys_size;j++ )	
					uinit[j]=0;
				//dta.addseg(sseg,pdata[i].virt_size-pdata[i].phys_size,uinit,uninitdata,NULL);
			}
		}
		else if ( (pdata[i].obj_flags&0x80)&&(!peobjdone) )
		{ // UNINIT_DATA;
			if ( Load_Data )
			{
				sseg.offs=pdata[i].rva+peh->image_base;
				BYTE* uinit=new BYTE[pdata[i].virt_size];
				for ( DWORD j=0;j<pdata[i].virt_size;j++ )
					uinit[j]=0;
				//dta.addseg(sseg,pdata[i].virt_size,uinit,uninitdata,NULL);
			}
		}
		else if ( !peobjdone )
		{ // CODE_DATA;
			if ( pdata[i].phys_size )
			{
				sseg.offs=pdata[i].rva+peh->image_base;
				//dta.addseg(sseg,pdata[i].phys_size,&fbuff[pdata[i].phys_offset],code32,NULL);
				//dta.possibleentrycode(sseg);
			}
		}
	}
	t.assign(SEG0,peh->entrypoint_rva+peh->image_base);

	for ( i=0;i<peh->objects;i++ )
	{
		if (pdata[i].rva <= peh->entrypoint_rva &&
			pdata[i].rva + pdata[i].virt_size > peh->entrypoint_rva)
		{
			proc2(&fbuff[pdata[i].phys_offset + peh->entrypoint_rva - pdata[i].rva],
				  //0x401000);
				  peh->entrypoint_rva+peh->image_base);
			break;
		}
	}
	//dsm.setcuraddr(t);
	//scheduler.addtask(dis_code,priority_definitecode,t,NULL);
	//scheduler.addtask(nameloc,priority_nameloc,t,"start");
	//scheduler.addtask(windowupdate,priority_window,nlptr,NULL);
}
*/