一段传染引入表的vc代码[网络技术]

文章作者:[E.S.T] 认真的雪 

#include <stdio.h> 
#include <windows.h> 

DWORD RVAToOffset(LPVOID lpBase,DWORD VirtualAddress) 
{ 
IMAGE_DOS_HEADER *dosHeader; 
IMAGE_NT_HEADERS *ntHeader; 
IMAGE_SECTION_HEADER *sectionHeader; 
int NumOfSections; 
dosHeader=(IMAGE_dos_HEADER*)lpBase; 
ntHeader=(IMAGE_NT_HEADERS*)((BYTE*)lpBase+dosHeader->e_lfanew); 
NumOfSections=ntHeader->FileHeader.NumberOfSections; 
for (int i=0;i<NumOfSections;i++) 
{ 
sectionHeader=(IMAGE_SECTION_HEADER*)((BYTE*)lpBase+dosHeader->e_lfanew+sizeof(IMAGE_NT_HEADERS))+i; 
if(VirtualAddress>sectionHeader->VirtualAddress&&VirtualAddress<sectionHeader->VirtualAddress+sectionHeader->SizeOfRawData) 
{ 
DWORD AposRAV=VirtualAddress-sectionHeader->VirtualAddress; 
DWORD Offset=sectionHeader->PointerToRawData+AposRAV; 
return Offset; 
} 
} 
return 0; 
} 

int sectionNum(LPVOID lpBase,DWORD VirtualAddress) 
{ 
IMAGE_DOS_HEADER *dosHeader; 
IMAGE_NT_HEADERS *ntHeader; 
IMAGE_SECTION_HEADER *sectionHeader; 
int NumOfSections; 
dosHeader=(IMAGE_dos_HEADER*)lpBase; 
ntHeader=(IMAGE_NT_HEADERS*)((BYTE*)lpBase+dosHeader->e_lfanew); 
NumOfSections=ntHeader->FileHeader.NumberOfSections; 
for (int i=0;i<NumOfSections;i++) 
{ 
sectionHeader=(IMAGE_SECTION_HEADER*)((BYTE*)lpBase+dosHeader->e_lfanew+sizeof(IMAGE_NT_HEADERS))+i; 
if(VirtualAddress>sectionHeader->VirtualAddress&&VirtualAddress<sectionHeader->VirtualAddress+sectionHeader->SizeOfRawData) 
{ 

return i; 
} 
} 
return -1; 
} 

int main(int argc, char* argv[]) 
{ 

HANDLE hFile=CreateFile(argv[1],GENERIC_READ|GENERIC_WRITE,0,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,NULL); 
if(hFile==INVALID_HANDLE_VALUE) 
{ 
printf("CreateFile Failed\n"); 
return 0; 
} 

HANDLE hMap=CreateFileMapping(hFile,NULL,PAGE_READWRITE,NULL,NULL,NULL); 
if(hMap==INVALID_HANDLE_VALUE) 
{ 
printf("CreateFileMapping Failed\n"); 
return 0; 
} 

LPVOID lpBase=MapViewOfFile(hMap,FILE_MAP_WRITE,0,0,0); 
if(lpBase==NULL) 
{ 
printf("MapViewOfFile Failed\n"); 
return 0;  
} 
IMAGE_DOS_HEADER *dosHeader; 
IMAGE_NT_HEADERS *ntHeader; 
dosHeader=(IMAGE_dos_HEADER*)lpBase; 

if (dosHeader->e_magic!=IMAGE_dos_SIGNATURE) 
{ 
printf("This is not a windows file\n"); 
return 0; 
} 

ntHeader=(IMAGE_NT_HEADERS*)((BYTE*)lpBase+dosHeader->e_lfanew); 
if(ntHeader->Signature!=IMAGE_NT_SIGNATURE) 
{ 
printf("This is not a win32 file\n"); 
return 0; 
} 
int numOfSections=ntHeader->FileHeader.NumberOfSections; 

int ncout=sectionNum(lpBase,ntHeader->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].VirtualAddress); 
if(ncout==-1) 
{ 
printf("get section failed\n"); 
return 0; 
} 
IMAGE_SECTION_HEADER *sectionHeader; 
sectionHeader=(IMAGE_SECTION_HEADER*)((BYTE*)lpBase+dosHeader->e_lfanew+sizeof(IMAGE_NT_HEADERS))+ncout; 
int nullsize=sectionHeader->SizeOfRawData-sectionHeader->Misc.VirtualSize; 
printf("%d\n",nullsize); 
IMAGE_IMPORT_DESCRIPTOR *ImportDec=(IMAGE_IMPORT_DESCRIPTOR*)((BYTE*)lpBase+RVAToOffset(lpBase,ntHeader->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].VirtualAddress)); 
int i=0; 
while(ImportDec->FirstThunk) 
{ 
i++; 
ImportDec++; 
} 
if(i*20+20*3+8+8>nullsize) 
{ 
printf("file space is not enough\n"); 
return 0; 
} 
IMAGE_IMPORT_DESCRIPTOR *newImport; 
newImport=(IMAGE_IMPORT_DESCRIPTOR *)((BYTE*)lpBase+sectionHeader->PointerToRawData+sectionHeader->Misc.VirtualSize); 
printf("%x\n",sectionHeader->PointerToRawData+sectionHeader->Misc.VirtualSize); 
printf("%d\n",sizeof(IMAGE_IMPORT_DESCRIPTOR)); 
ImportDec=(IMAGE_IMPORT_DESCRIPTOR*)((BYTE*)lpBase+RVAToOffset(lpBase,ntHeader->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].VirtualAddress)); 
i=0; 
while(ImportDec->FirstThunk) 
{ 
*newImport=*ImportDec; 
i++; 

[1] [2]  下一页