PBMiner

• Sources
• fastfuncs
• pbvm.h

#define WIN32_LEAN_AND_MEAN
#define _CRT_SECURE_NO_WARNINGS

#include <windows.h>
#include <stdlib.h>
#include <string.h>
#include <stdio.h>
#include <Shlwapi.h>
#include <malloc.h>

typedef struct {
	// 0x0004	*this
	// 0x011e	heap ptr
	// 0x015c	stack position
	// 0x0154	stack pointer
	// 0x0158	something else stack related?
}vm_state;

#pragma pack(1)

enum pbvalue_type
{
	pbvalue_notype = 0,
	pbvalue_int,
	pbvalue_long,
	pbvalue_real,
	pbvalue_double,
	pbvalue_dec,
	pbvalue_string,
	pbvalue_boolean,
	pbvalue_any,
	pbvalue_uint,
	pbvalue_ulong,
	pbvalue_blob,
	pbvalue_date,
	pbvalue_time,
	pbvalue_datetime,
	pbvalue_dummy1,
	pbvalue_dummy2,
	pbvalue_dummy3,
	pbvalue_char,
	pbvalue_dummy4,
	pbvalue_longlong,
	pbvalue_byte
};

typedef struct {
	DWORD value;
	short flags;
	/* known flags
		0x0001	is null
		0x0004	autoinstantiate
		0x0040	system type
		0x0100	instance?
		0x0200	shared?
		0x0400	2 byte
		0x0800	not valid?
		0x2000	is array;
	*/
	short type;
}value;

typedef struct {
	DWORD len;
	char data[1];
}blob;

#define IS_NULL 1
#define IS_ARRAY 0x2000

// variable?
typedef struct {
	DWORD flag; // 0 = immediate value / local variable, 1 = object field, 2 = object array element?
	short noidea; // -1??
	short type; 
	short flags; 
	value *value; // +0x0ah
	DWORD parent; // +0x0eh
	DWORD noidea3;
	DWORD item;
}lvalue;

// reference to variable?
typedef struct {
	lvalue *ptr;
	short isnull;
}lvalue_ref;

typedef struct{
    long f1;
    short group_id;//+4
    short class_id;//+6
    short routine_id;
    short f2;
	short f3;
	short f4;
	short f5;
	short f6;
	short f7;
	short f8;
	short f9;
	void * f10;
	short f12;
	short f13;
	short f14;
	short f15;
    short caller_line_no;//+38
	short f16;
	short f17;
	short f18;
	short f19;
	short f20;
	short f21;
	void * f22;
	short f24;
	short f25;
	short f26;
	short f27;
	short f28;
}stack_info;

typedef struct{ // don't need to know what's actually in this struct...
}group_data;

typedef struct{ // don't need to know what's actually in this struct...
}class_data;

typedef struct {
} pb_array;

typedef struct {
} pb_class;

typedef bool __stdcall shlist_callback(stack_info *, void *);

// PBVM imports
value * __stdcall ot_get_field_lv(vm_state *, value *, DWORD);
value * __stdcall ot_get_field_item_lv(vm_state *, value *, DWORD, DWORD);
value * __stdcall ot_get_next_evaled_arg_no_convert(vm_state *);
short __stdcall ot_get_simple_intarg(vm_state *, DWORD *);
int __stdcall ot_array_num_items(vm_state *, pb_array *);
value * __stdcall ot_array_index(vm_state *, pb_array *, int);
void __stdcall ot_set_return_val(vm_state *, value *);
void __stdcall ot_no_return_val(vm_state *);
int __stdcall rt_create_obinst(vm_state *, wchar_t *, pb_class**);
int __stdcall ot_create_obinst_at_lval(vm_state *,lvalue_ref *,int,int);
int __stdcall ob_set_field(vm_state *, int,int,value*);
int __stdcall ob_set_ptr_field(vm_state *, pb_class*,int,void *);
int __stdcall ob_set_ulong_field(vm_state *, int,int,int);
int __stdcall ob_get_ulong_field(vm_state *, int,int);
wchar_t * __stdcall ob_dup_string(vm_state *, wchar_t *);
void * __stdcall ot_get_valptr_arg(vm_state *, DWORD *);
int __stdcall ot_get_curr_obinst_expr(vm_state *, pb_class**, DWORD*);
lvalue_ref * __stdcall ot_get_next_lvalue_arg(vm_state *, DWORD *);
pb_array * __stdcall ot_array_create_unbounded(vm_state *, int, int);
void __stdcall ot_free_val_ptr(vm_state *, value *);
void * __stdcall pbstg_alc(vm_state *, int, int);
void __stdcall ot_assign_ref_array(vm_state *, lvalue *, pb_array*, short, short);
void __stdcall ot_assign_ref_string(vm_state *, lvalue *, wchar_t*, short);
void __stdcall ot_assign_ref_long(vm_state *, lvalue *, int, short);
int __stdcall ob_get_no_fields(vm_state *, pb_class *);
int __stdcall ob_get_first_user_field(vm_state *, pb_class *);
void __stdcall ob_get_field(vm_state *, pb_class *, int, value *);
void __stdcall ob_set_field(vm_state *, pb_class *, int, value *);
int __stdcall ot_get_ulongarg(vm_state *, DWORD *);
int __stdcall pbstg_sz(vm_state *, void *);
void * __stdcall pbstg_realc(vm_state *, void *, int, int);
wchar_t * __stdcall ob_get_group_name(vm_state *, short);
wchar_t * __stdcall ob_class_name_not_indirect(vm_state *, int);
group_data * __stdcall ob_group_data_srch(vm_state *, short);
class_data * __stdcall ob_get_class_entry(vm_state *, group_data **, short);
wchar_t * __stdcall ob_event_module_name(vm_state *, group_data *, class_data *, short);
bool __stdcall shlist_traversal(void *, void *, shlist_callback);
int __stdcall rtRoutineExec(vm_state *, int, pb_class *, int, int, value*, int, int, int, int);

#define GET_HEAP(x) (*(DWORD *)(((char *)x) + 0x11e))
#define GET_STACKLIST(x) (void*)(*(DWORD *)(((char *)x) + 218))
#define GET_THROW(x) (((pb_class**)x)[147])


value * get_lvalue(vm_state *vm, lvalue_ref *value_ref);
void Throw_Exception(vm_state *vm, wchar_t *text, ...);
void Install_Crash_Hook();
void Uninstall_Crash_Hook();

extern vm_state *last_vm;