format PE64 CONSOLE 5.0 at $10000
section '' readable writeable executable

    entry $

;-------------------------- DECRYPT
    lea esi,[.1 - 1]
    push .end - .1 + 1
    push rsi
    pop rdi
    pop rcx
.0: lodsb
    xor al,$55
    stosb
    loop .0
.1:

;-------------------------- PROGRAM
        enter '0',0
        mov ecx,-11             ; STD_OUTPUT_HANDLE
        call [GetStdHandle]
        mov [hStdOut],rax
        inc rax
        jz .ERROR_INVALID_HANDLE

        mov r9,'mY  bIg '
        mov r8,' sEcReT!'
        lea rdx,[.test]
        lea ecx,[_buf]
        call [wsprintfA]

        and qword [rsp+32],0
        lea r9,[rsp+40]
        mov r8,rax
        lea rdx,[_buf]
        mov rcx,[hStdOut]
        call [WriteFile]
        xchg ecx,eax
        jrcxz .ERROR_WRITE_FAULT

.ERROR_SUCCESS:
        xor eax,eax
        leave
        retn
.ERROR_INVALID_HANDLE:
        push 6
        pop rax
        leave
        retn
.ERROR_WRITE_FAULT:
        push 29
        pop rax
        leave
        retn

.test   db      \
        13,10,"%I64X",\
        13,10,"%I64X",\
        0
.end:
;-------------------------- ENCRYPT


repeat $ - .1 + 1
  load a byte from $ - %
  store byte a xor $55 at $ - %
end repeat


;--------------------------
macro import [lib,api] {
  common
    local part0,part1,first

    macro part0 lib0,[api0] \{
      \common   lib0\#_STR db \`lib0
      \forward  rb 2 - RVA $ AND 1
                label api0\#_STR at $-2
                db \`api0
      \common   db 0
      \}
    first = 7
    macro part1 lib1,[api1] \{
      \common   rb (8 - RVA $ AND 7) AND first
                first = 15
                label lib1\#_TAB
      \forward  api1 dq RVA api1\#_STR
      \}
  forward  part0 lib,api
  forward  part1 lib,api
  common   data import
  forward  dd 0,0,0,RVA lib#_STR,RVA lib#_TAB
  common   rd 5
           end data
}
import  \
        kernel32,<\
                GetStdHandle,\
                WriteFile\
                >,\
        user32,<\
                wsprintfA\
                >

hStdIn          rq 1
hStdOut         rq 1

_buf:           rb 1024
_buf.. = $ - _buf    

; selfencrypt
; 04.07.2008

format PE GUI 4.0
entry start

include "%include%/win32a.inc"

;
; This is the encryption macro.
; It is a simple XOR with 0xAA (10101010 in binary).
;
macro encrypt dstart,dsize {
    local ..char,..key,..shift
    repeat dsize
        load ..char from dstart+%-1
        ..char = ..char xor $AA
        store ..char at dstart+%-1
    end repeat
}

section ".code" code readable writeable executable
start:
        ;
        ; This will be the only non-encrypted part of the code.
        ; Here we will decrypt the code at run-time.
        ;
        mov     edx,real_start
        xor     eax,eax
        mov     ecx,code_size
@@:     xor     byte [edx],$AA
        inc     edx
        loop    @B

real_start:
        ;
        ; Everything from here on will be encrypted.
        ;
        stdcall [MessageBox],0,HelloWorld,HelloWorld,MB_ICONASTERISK

        stdcall [ExitProcess],0

        ;
        ; Encrypt everything from real_start to here.
        ;
        display "Encrypting code... "
        code_size = $ - real_start
        encrypt real_start,code_size
        display "done",13,10

section ".data" data readable writeable import
        library kernel32,"kernel32.dll",user32,"user32.dll"
        include "%include%/api/kernel32.inc"
        include "%include%/api/user32.inc"

        HelloWorld      db      "Hello World!",0
    

lodsd             ; get
ror eax,1         ; skew
xor eax,edx       ; variable
xor eax,edi       ; delta constant
xor eax,$53CA9653 ; constant
stosd             ; set
xchg edx,eax      ; next