修改TimeDateStamp值,造不同的文件.

HANDLE hFile = CreateFileA(externName.c_str(), GENERIC_READ, 
		0,
		NULL,
		OPEN_EXISTING,
		FILE_ATTRIBUTE_NORMAL,
		NULL);

	if (INVALID_HANDLE_VALUE != hFile)
	{
		dwFileSize = GetFileSize(hFile, NULL);

		lpBuffer = new(std::nothrow) BYTE[dwFileSize];

		if (lpBuffer)
		{
			if (ReadFile(hFile, lpBuffer, dwFileSize, &dwBytesRead, NULL) != FALSE)
			{
				srand(GetCurrentTime());
				
				BOOL ret = TRUE;

				BYTE key = rand();

				ret = randomChangeTimeStamp(lpBuffer, dwFileSize, key);
				if (ret)
				{
				std::string subFileName = “newfile”;

				ret = writeFileContent(subFileName, lpBuffer, dwFileSize);

				// 将数据还原
				randomChangeTimeStamp(lpBuffer, dwFileSize, key);
			}

			delete [] lpBuffer;
		}
		CloseHandle(hFile);
	}
	else
	{
		printf("打开文件失败,请查看[%s]是否被占用", externName.c_str());
	}


BOOL randomChangeTimeStamp(LPBYTE pData, DWORD size, BYTE key)
{
<span style="white-space:pre">	</span>if (PeTypeUnknown != getPeType((LPBYTE)pData, size))
<span style="white-space:pre">	</span>{
<span style="white-space:pre">		</span>PIMAGE_DOS_HEADER pImageDosHeader = (PIMAGE_DOS_HEADER)pData;


<span style="white-space:pre">		</span>PIMAGE_NT_HEADERS32 pImageNtHeadr32 = (PIMAGE_NT_HEADERS32)(pData + pImageDosHeader->e_lfanew);


<span style="white-space:pre">		</span>/*time_t nowTime;
<span style="white-space:pre">		</span>time(&nowTime);
<span style="white-space:pre">		</span>pImageNtHeadr32->FileHeader.TimeDateStamp = nowTime;*/


<span style="white-space:pre">		</span>PBYTE pTimeStamp = (PBYTE)&pImageNtHeadr32->FileHeader.TimeDateStamp;
<span style="white-space:pre">		</span>int size = sizeof(pImageNtHeadr32->FileHeader.TimeDateStamp);
<span style="white-space:pre">		</span>
<span style="white-space:pre">		</span>for (int i = 0; i < size; ++i)
<span style="white-space:pre">		</span>{
<span style="white-space:pre">			</span>pTimeStamp[i] ^= key;
<span style="white-space:pre">		</span>}


<span style="white-space:pre">		</span>return TRUE;
<span style="white-space:pre">	</span>}


<span style="white-space:pre">	</span>return FALSE;
}


BOOL writeFileContent(std::string subFileName, LPBYTE pData, DWORD size)
{
<span style="white-space:pre">	</span>BOOL ret = FALSE;


<span style="white-space:pre">	</span>HANDLE hFile = CreateFileA(subFileName.c_str(), GENERIC_READ | GENERIC_WRITE, 
<span style="white-space:pre">		</span>0,
<span style="white-space:pre">		</span>NULL,
<span style="white-space:pre">		</span>CREATE_ALWAYS,
<span style="white-space:pre">		</span>FILE_ATTRIBUTE_NORMAL,
<span style="white-space:pre">		</span>NULL);


<span style="white-space:pre">	</span>if (INVALID_HANDLE_VALUE != hFile)
<span style="white-space:pre">	</span>{
<span style="white-space:pre">		</span>DWORD dwWrite = 0;
<span style="white-space:pre">		</span>ret = WriteFile(hFile, pData, size, &dwWrite, NULL);
<span style="white-space:pre">		</span>
<span style="white-space:pre">		</span>CloseHandle(hFile);
<span style="white-space:pre">	</span>}


<span style="white-space:pre">	</span>return ret;
}
  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值