mirror of
https://github.com/upx/upx
synced 2025-09-28 19:06:07 +08:00

Test with --force-execve and --no-filter. p_lx_exc.cpp p_lx_sh.cpp stub/l_lx_sh86.asm stub/l_lx_sh86.h committer: jreiser <jreiser> 1144381286 +0000
184 lines
5.4 KiB
NASM
184 lines
5.4 KiB
NASM
; l_lx_sh86.asm -- Linux program entry point & decompressor (shell script)
|
|
;
|
|
; This file is part of the UPX executable compressor.
|
|
;
|
|
; Copyright (C) 1996-2004 Markus Franz Xaver Johannes Oberhumer
|
|
; Copyright (C) 1996-2004 Laszlo Molnar
|
|
; Copyright (C) 2000-2004 John F. Reiser
|
|
; All Rights Reserved.
|
|
;
|
|
; UPX and the UCL library are free software; you can redistribute them
|
|
; and/or modify them under the terms of the GNU General Public License as
|
|
; published by the Free Software Foundation; either version 2 of
|
|
; the License, or (at your option) any later version.
|
|
;
|
|
; This program is distributed in the hope that it will be useful,
|
|
; but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
; GNU General Public License for more details.
|
|
;
|
|
; You should have received a copy of the GNU General Public License
|
|
; along with this program; see the file COPYING.
|
|
; If not, write to the Free Software Foundation, Inc.,
|
|
; 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
;
|
|
; Markus F.X.J. Oberhumer Laszlo Molnar
|
|
; <mfx@users.sourceforge.net> <ml1050@users.sourceforge.net>
|
|
;
|
|
; John F. Reiser
|
|
; <jreiser@users.sourceforge.net>
|
|
;
|
|
|
|
|
|
BITS 32
|
|
SECTION .text
|
|
CPU 386
|
|
|
|
; /*************************************************************************
|
|
; // program entry point
|
|
; // see glibc/sysdeps/i386/elf/start.S
|
|
; **************************************************************************/
|
|
|
|
GLOBAL _start
|
|
;__LEXEC000__
|
|
_start:
|
|
;;;; int3
|
|
;; How to debug this code: Uncomment the 'int3' breakpoint instruction above.
|
|
;; Build the stubs and upx. Compress a testcase, such as a copy of /bin/date.
|
|
;; Invoke gdb, and give a 'run' command. Define a single-step macro such as
|
|
;; define g
|
|
;; stepi
|
|
;; x/i $pc
|
|
;; end
|
|
;; and a step-over macro such as
|
|
;; define h
|
|
;; x/2i $pc
|
|
;; tbreak *$_
|
|
;; continue
|
|
;; x/i $pc
|
|
;; end
|
|
;; Step through the code; remember that <Enter> repeats the previous command.
|
|
;;
|
|
|
|
call main ; push address of decompress subroutine
|
|
decompress:
|
|
|
|
; /*************************************************************************
|
|
; // C callable decompressor
|
|
; **************************************************************************/
|
|
|
|
%define INP dword [esp+8*4+4]
|
|
%define INS dword [esp+8*4+8]
|
|
%define OUTP dword [esp+8*4+12]
|
|
%define OUTS dword [esp+8*4+16]
|
|
|
|
;__LEXEC010__
|
|
pusha
|
|
; cld
|
|
|
|
mov esi, INP
|
|
mov edi, OUTP
|
|
|
|
or ebp, byte -1
|
|
;;; align 8
|
|
|
|
%include "n2b_d32.ash"
|
|
%include "n2d_d32.ash"
|
|
%include "n2e_d32.ash"
|
|
%include "cl1_d32.ash"
|
|
%include "macros.ash"
|
|
cjt32 0
|
|
|
|
;__LEXEC015__
|
|
; eax is 0 from decompressor code
|
|
;xor eax, eax ; return code
|
|
|
|
; check compressed size
|
|
mov edx, INP
|
|
add edx, INS
|
|
cmp esi, edx
|
|
jz .ok
|
|
dec eax
|
|
.ok:
|
|
|
|
; write back the uncompressed size
|
|
sub edi, OUTP
|
|
mov edx, OUTS
|
|
mov [edx], edi
|
|
|
|
mov [7*4 + esp], eax
|
|
;__LEXEC017__
|
|
popa
|
|
ret
|
|
|
|
;__LEXEC020__
|
|
|
|
%define PAGE_SIZE ( 1<<12)
|
|
|
|
%define MAP_FIXED 0x10
|
|
%define MAP_PRIVATE 0x02
|
|
%define MAP_ANONYMOUS 0x20
|
|
%define PROT_READ 1
|
|
%define PROT_WRITE 2
|
|
%define PROT_EXEC 4
|
|
%define __NR_mmap 90
|
|
|
|
%define szElf32_Ehdr 0x34
|
|
%define szElf32_Phdr 8*4
|
|
%define e_entry (16 + 2*2 + 4)
|
|
%define p_memsz 5*4
|
|
%define szl_info 12
|
|
%define szp_info 12
|
|
%define p_filesize 4
|
|
|
|
; Decompress the rest of this loader, and jump to it
|
|
unfold:
|
|
pop esi ; &{ sz_uncompressed, sz_compressed, compressed_data...}
|
|
cld
|
|
lodsd
|
|
push eax ; sz_uncompressed of folded stub (junk, actually)
|
|
push esp ; &sz_uncompressed
|
|
mov edx, 0x01400000 ; origin of this program
|
|
mov eax, [p_memsz + szElf32_Ehdr + edx] ; length of loaded pages
|
|
add eax, edx
|
|
add edx, szElf32_Ehdr + 2*szElf32_Phdr ; convenient ptr
|
|
push eax ; &destination
|
|
|
|
; mmap space for unfolded stub, and uncompressed script
|
|
mov ecx, [szl_info + p_filesize + edx] ; script size
|
|
add ecx, 1+ 3+ (3 -1)+ PAGE_SIZE ; '\0' + "-c" + decompr_overrun + stub
|
|
|
|
push eax ; offset (ignored when MAP_ANONYMOUS)
|
|
push eax ; fd (ignored when MAP_ANONYMOUS)
|
|
push byte MAP_FIXED | MAP_PRIVATE | MAP_ANONYMOUS
|
|
push byte PROT_READ | PROT_WRITE | PROT_EXEC
|
|
push ecx ; length
|
|
push eax ; destination
|
|
mov ebx, esp ; address of parameter vector for __NR_mmap
|
|
push byte __NR_mmap
|
|
pop eax
|
|
int 0x80
|
|
lea ebx, [3+ PAGE_SIZE + eax] ; place for uncompressed script
|
|
add esp, byte 6*4 ; discard args to mmap
|
|
|
|
lodsd
|
|
push eax ; sz_compressed of folded stub
|
|
lodsd ; junk cto8, algo, unused[2]
|
|
push esi ; &compressed_data
|
|
call ebp ; decompress(&src, srclen, &dst, &dstlen)
|
|
pop eax ; discard &compressed_data
|
|
pop eax ; discard sz_compressed
|
|
ret ; &destination
|
|
main:
|
|
pop ebp ; &decompress
|
|
call unfold
|
|
|
|
eof:
|
|
; __XTHEENDX__
|
|
section .data
|
|
dd -1
|
|
dw eof
|
|
|
|
; vi:ts=8:et:nowrap
|
|
|