哎呀！看你这画面怎么好像3年前我玩的那个999朵玫瑰恶意插件！！

你想往哪里输出啊 cui不行吧  怎么着也得是gui吧

gui的话 有图像控件 很容易的

楼主的附件代码 貌似用了OPENGL （我猜的）

int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd)
{
  HDC v4; // edi@1
  __int32 v5; // eax@4
  __int32 v6; // edx@5
  __int32 v7; // edx@8
  BOOL v8; // eax@10
  int result; // eax@11
  MSG Msg; // [sp+Ch] [bp-24h]@15
  CHAR BitmapName; // [sp+28h] [bp-8h]@2

  v4 = CreateICA("DISPLAY", 0, 0, 0);
  for ( dword_409570 = 0; dword_409570 < 6; ++dword_409570 )
  {
    wsprintfA(&BitmapName, "BM_I%d", dword_409570);
    *(&dword_409540 + dword_409570) = LoadBitmapA(hInstance, &BitmapName);
    wsprintfA(&BitmapName, "BM_M%d", dword_409570);
    *(&dword_409558 + dword_409570) = LoadBitmapA(hInstance, &BitmapName);
  }
  v5 = time(0);
  srand(v5);
  ::hInstance = hInstance;
  nWidth = GetDeviceCaps(v4, 8);
  nHeight = GetDeviceCaps(v4, 10);
  if ( nWidth )
    v6 = _lrand() % nWidth;
  else
    v6 = 0;
  dword_409574 = v6;
  if ( nHeight )
    v7 = _lrand() % nHeight;
  else
    v7 = 0;
  dword_409578 = v7;
  v8 = DeleteDC(v4);
  if ( sub_401309(v8) )
  {
    if ( sub_401370() )
    {
      SetTimer(hWnd, 1u, 0x64u, 0);
      while ( GetMessageA(&Msg, 0, 0, 0) )
      {
        TranslateMessage(&Msg);
        DispatchMessageA(&Msg);
      }
      KillTimer(hWnd, 1u);
      for ( dword_409570 = 0; dword_409570 < 6; ++dword_409570 )
      {
        DeleteObject(*(&dword_409540 + dword_409570));
        DeleteObject(*(&dword_409558 + dword_409570));
      }
      result = 0;
    }
    else
    {
      result = 2;
    }
  }
  else
  {
    result = 1;
  }
  return result;
}

感谢了！虽然还是不知道怎么弄，不过也学了3个专业名词，了解了一点新东西！

  bytes   pages size description
--------- ----- ---- --------------------------------------------
  3661824   447 8192 allocating memory for b-tree...
  3661824   447 8192 allocating memory for virtual array...
   262144    32 8192 allocating memory for name pointers...
-----------------------------------------------------------------
  7585792            total memory allocated

Loading processor module C:\Documents and Settings\Administrator\My Documents\ida61\procs\pc.w32 for metapc...OK
Autoanalysis subsystem has been initialized.
Possible file format: MS-DOS executable (EXE) (C:\Documents and Settings\Administrator\My Documents\ida61\loaders\dos.ldw)
Possible file format: Portable executable for 80386 (PE) (C:\Documents and Settings\Administrator\My Documents\ida61\loaders\pe.ldw)
Loading file 'F:\这个圣诞节很温暖\这个圣诞节很温暖.exe' into database...
Detected file format: Portable executable for 80386 (PE)
  0. Creating a new segment  (00401000-00408000) ... ... OK
  1. Creating a new segment  (00408000-0040D000) ... ... OK
  2. Creating a new segment  (0040D000-0040E000) ... ... OK
Reading exports directory...
Reading imports directory...
Applying fixups...
Plan  FLIRT signature: BCC v4.x/5.x & BCB v1.0/v7.0 BDS2006 win32 runtime
autoload.cfg: bh32rw32.sig autoloads bcb5win.til
Assuming __cdecl calling convention by default
main() function at 401184, named "WinMain"
Marking typical code sequences...
Flushing buffers, please wait...ok
File 'F:\这个圣诞节很温暖\这个圣诞节很温暖.exe' has been successfully loaded into the database.
Compiling file 'C:\Documents and Settings\Administrator\My Documents\ida61\idc\ida.idc'...
Executing function 'main'...
Compiling file 'C:\Documents and Settings\Administrator\My Documents\ida61\idc\onload.idc'...
Executing function 'OnLoad'...
IDA is analysing the input file...
You may start to explore the input file right now.
Using FLIRT signature: BCC v4.x/5.x & BCB v1.0/v7.0 BDS2006 win32 runtime
Propagating type information...
Function argument information has been propagated
The initial autoanalysis has been finished.
Hex-Rays Decompiler plugin has been loaded (v1.5.0.110408)
  License: 57-3B73-7AE4-E2 ESET spol. s r.o. (36 users)
  The hotkeys are F5: decompile, Ctrl-F5: decompile all.
  Please check the Edit/Plugins menu for more informaton.
--------------------------------------------------------------------------------------
Python 2.6.5 (r265:79096, Mar 19 2010, 21:48:26) [MSC v.1500 32 bit (Intel)]
IDAPython v1.5.0 final (serial 0) (c) The IDAPython Team <idapython@

13楼的代码就是楼主的附件的winmain()的代码
可以猜一下 它是怎么写的

呵呵，保存一下！现在还是先不纠结于此了，等我把前面的基础学好了再来研究这些！走都没学会就想跑了！

就LZ这个软件的实现原理是
1.软件是全屏的。
2.软件的背景图片是：软件启动时桌面（显示器）上的画面。
3.在该软件上随机位置随机打印这几朵玫瑰！
4.点一下鼠标就没啦！

恶意插件 恶意插件 呵呵

先学习了