267 lines
5.8 KiB
PHP
267 lines
5.8 KiB
PHP
|
|
||
|
include '../../../examples/x86/include/80386.inc'
|
||
|
|
||
|
macro format?.PE? settings
|
||
|
PE.Settings.Characteristics = IMAGE_FILE_EXECUTABLE_IMAGE or IMAGE_FILE_32BIT_MACHINE or IMAGE_FILE_LINE_NUMS_STRIPPED or IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
||
|
PE.Settings.DllCharacteristics = 0
|
||
|
PE.Settings.Stamp = +VERSION
|
||
|
PE.Settings.LegacyHeaders = 0
|
||
|
local seq
|
||
|
define seq settings:
|
||
|
while 1
|
||
|
match :, seq
|
||
|
break
|
||
|
else match =DLL? more, seq
|
||
|
PE.Settings.Characteristics = PE.Settings.Characteristics or IMAGE_FILE_DLL
|
||
|
redefine seq more
|
||
|
else match =large? more, seq
|
||
|
PE.Settings.Characteristics = PE.Settings.Characteristics or IMAGE_FILE_LARGE_ADDRESS_AWARE
|
||
|
redefine seq more
|
||
|
else match =WDM? more, seq
|
||
|
PE.Settings.DllCharacteristics = PE.Settings.DllCharacteristics or IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
|
||
|
redefine seq more
|
||
|
else match =NX? more, seq
|
||
|
PE.Settings.DllCharacteristics = PE.Settings.DllCharacteristics or IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
||
|
redefine seq more
|
||
|
else match =at? base =on? stub :, seq
|
||
|
PE.Settings.ImageBase = base
|
||
|
PE.Settings.Stub = stub
|
||
|
break
|
||
|
else match =at? base :, seq
|
||
|
PE.Settings.ImageBase = base
|
||
|
break
|
||
|
else match =on? stub :, seq
|
||
|
PE.Settings.Stub = stub
|
||
|
break
|
||
|
else
|
||
|
match =GUI? more, seq
|
||
|
PE.Settings.Subsystem = IMAGE_SUBSYSTEM_WINDOWS_GUI
|
||
|
redefine seq more
|
||
|
else match =console? more, seq
|
||
|
PE.Settings.Subsystem = IMAGE_SUBSYSTEM_WINDOWS_CUI
|
||
|
redefine seq more
|
||
|
else match =native? more, seq
|
||
|
PE.Settings.Subsystem = IMAGE_SUBSYSTEM_NATIVE
|
||
|
PE.Settings.SectionAlignment = 32
|
||
|
PE.Settings.FileAlignment = 32
|
||
|
redefine seq more
|
||
|
else match =EFI? more, seq
|
||
|
PE.Settings.Magic = 0x20B
|
||
|
PE.Settings.Subsystem = IMAGE_SUBSYSTEM_EFI_APPLICATION
|
||
|
redefine seq more
|
||
|
else match =EFIboot? more, seq
|
||
|
PE.Settings.Magic = 0x20B
|
||
|
PE.Settings.Subsystem = IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER
|
||
|
redefine seq more
|
||
|
else match =EFIruntime? more, seq
|
||
|
PE.Settings.Magic = 0x20B
|
||
|
PE.Settings.Subsystem = IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER
|
||
|
redefine seq more
|
||
|
else
|
||
|
err 'invalid argument'
|
||
|
break
|
||
|
end match
|
||
|
match V.v more, seq
|
||
|
PE.Settings.MajorSubsystemVersion = V
|
||
|
PE.Settings.MinorSubsystemVersion = v
|
||
|
redefine seq more
|
||
|
end match
|
||
|
end match
|
||
|
end while
|
||
|
if PE.Settings.Characteristics and IMAGE_FILE_DLL
|
||
|
format binary as 'dll'
|
||
|
else
|
||
|
format binary as 'exe'
|
||
|
end if
|
||
|
include '../../../examples/x86/include/format/pe.inc'
|
||
|
use32
|
||
|
end macro
|
||
|
|
||
|
macro struct? name
|
||
|
macro ends?!
|
||
|
end namespace
|
||
|
esc end struc
|
||
|
virtual at 0
|
||
|
name name
|
||
|
sizeof.name = $
|
||
|
end virtual
|
||
|
purge ends?
|
||
|
end macro
|
||
|
esc struc name
|
||
|
label . : sizeof.name
|
||
|
namespace .
|
||
|
end macro
|
||
|
|
||
|
calminstruction invoke? proc*,args&
|
||
|
local tmp, tmpst, stack
|
||
|
match , args
|
||
|
jyes go
|
||
|
collect:
|
||
|
match tmpst=,args, args
|
||
|
take stack, tmpst
|
||
|
jyes collect
|
||
|
push:
|
||
|
match tmp], args
|
||
|
jyes regular
|
||
|
check args relativeto ebp & args - ebp
|
||
|
jno regular
|
||
|
arrange tmp, =push =eax
|
||
|
assemble tmp
|
||
|
arrange tmp, =lea =eax,[args]
|
||
|
assemble tmp
|
||
|
arrange tmp, =xchg =eax,[=esp]
|
||
|
assemble tmp
|
||
|
jump next
|
||
|
regular:
|
||
|
arrange tmp, =pushd args
|
||
|
assemble tmp
|
||
|
next:
|
||
|
take args, stack
|
||
|
jyes push
|
||
|
go:
|
||
|
arrange tmp, =call [proc]
|
||
|
assemble tmp
|
||
|
end calminstruction
|
||
|
|
||
|
calminstruction mov? dest*,src*
|
||
|
local tmp
|
||
|
match tmp], src
|
||
|
jyes regular
|
||
|
check src relativeto ebp & src - ebp
|
||
|
jno regular
|
||
|
arrange tmp, =lea dest,[src]
|
||
|
assemble tmp
|
||
|
exit
|
||
|
regular:
|
||
|
arrange tmp, =mov dest,src
|
||
|
assemble tmp
|
||
|
end calminstruction
|
||
|
|
||
|
macro library? definitions&
|
||
|
PE.Imports:
|
||
|
iterate <name,string>, definitions
|
||
|
if ~ name.redundant
|
||
|
dd RVA name.lookup,0,0,RVA name.str,RVA name.address
|
||
|
end if
|
||
|
name.referred = 1
|
||
|
end iterate
|
||
|
dd 0,0,0,0,0
|
||
|
iterate <name,string>, definitions
|
||
|
if ~ name.redundant
|
||
|
name.str db string,0
|
||
|
align 2
|
||
|
end if
|
||
|
end iterate
|
||
|
end macro
|
||
|
|
||
|
macro import? name,definitions&
|
||
|
align 4
|
||
|
if defined name.referred
|
||
|
name.lookup:
|
||
|
iterate <label,string>, definitions
|
||
|
if used label
|
||
|
if string eqtype ''
|
||
|
dd RVA name.label
|
||
|
else
|
||
|
dd 80000000h + string
|
||
|
end if
|
||
|
end if
|
||
|
end iterate
|
||
|
if $ > name.lookup
|
||
|
name.redundant = 0
|
||
|
dd 0
|
||
|
else
|
||
|
name.redundant = 1
|
||
|
end if
|
||
|
name.address:
|
||
|
iterate <label,string>, definitions
|
||
|
if used label
|
||
|
if string eqtype ''
|
||
|
label dd RVA name.label
|
||
|
else
|
||
|
label dd 80000000h + string
|
||
|
end if
|
||
|
end if
|
||
|
end iterate
|
||
|
if ~ name.redundant
|
||
|
dd 0
|
||
|
end if
|
||
|
iterate <label,string>, definitions
|
||
|
if used label & string eqtype ''
|
||
|
name.label dw 0
|
||
|
db string,0
|
||
|
align 2
|
||
|
end if
|
||
|
end iterate
|
||
|
end if
|
||
|
end macro
|
||
|
|
||
|
macro export dllname,exports&
|
||
|
iterate <label,string>, exports
|
||
|
|
||
|
local module,addresses,names,ordinal,count
|
||
|
count = %%
|
||
|
dd 0,0,0,RVA module,1
|
||
|
dd count,count,RVA addresses,RVA names,RVA ordinal
|
||
|
addresses:
|
||
|
repeat count
|
||
|
indx %
|
||
|
dd RVA label
|
||
|
end repeat
|
||
|
names:
|
||
|
repeat count
|
||
|
dd RVA names.name#%
|
||
|
end repeat
|
||
|
ordinal:
|
||
|
repeat count
|
||
|
dw %-1
|
||
|
end repeat
|
||
|
module db dllname,0
|
||
|
repeat count
|
||
|
indx %
|
||
|
names.name#% db string,0
|
||
|
end repeat
|
||
|
|
||
|
local x,y,z,str1,str2,v1,v2
|
||
|
x = count shr 1
|
||
|
while x > 0
|
||
|
y = x
|
||
|
while y < count
|
||
|
z = y
|
||
|
while z-x >= 0
|
||
|
load v1:dword from names+z*4
|
||
|
str1 = ($-(RVA $))+v1
|
||
|
load v2:dword from names+(z-x)*4
|
||
|
str2 = ($-(RVA $))+v2
|
||
|
while v1 > 0
|
||
|
load v1:byte from str1+%-1
|
||
|
load v2:byte from str2+%-1
|
||
|
if v1 <> v2
|
||
|
break
|
||
|
end if
|
||
|
end while
|
||
|
if v1 < v2
|
||
|
load v1:dword from names+z*4
|
||
|
load v2:dword from names+(z-x)*4
|
||
|
store v1:dword at names+(z-x)*4
|
||
|
store v2:dword at names+z*4
|
||
|
load v1:word from ordinal+z*2
|
||
|
load v2:word from ordinal+(z-x)*2
|
||
|
store v1:word at ordinal+(z-x)*2
|
||
|
store v2:word at ordinal+z*2
|
||
|
else
|
||
|
break
|
||
|
end if
|
||
|
z = z-x
|
||
|
end while
|
||
|
y = y+1
|
||
|
end while
|
||
|
x = x shr 1
|
||
|
end while
|
||
|
|
||
|
break
|
||
|
end iterate
|
||
|
end macro
|
||
|
|
||
|
include '../kernel32.inc'
|