可重用函数:

最新推荐文章于 2024-09-05 08:49:35 发布

pengkaitsj

最新推荐文章于 2024-09-05 08:49:35 发布

阅读量86

点赞数

本文链接：https://blog.csdn.net/pengkaitsj/article/details/8182883

版权

ULONG MapPeFile(TCHAR* szFileName)
{
	HANDLE hFile;
	ULONG numR;
	IMAGE_DOS_HEADER dosHeader = {0};
	IMAGE_NT_HEADERS ntHeader;
	
	ULONG dwImageSize;
    ULONG dwNumOfSections;
	ULONG dwHeadSize;

	PIMAGE_SECTION_HEADER pSection;
    char* pBase;
	ULONG nIndex;
    
    hFile = CreateFile(szFileName, 
					   GENERIC_READ | GENERIC_WRITE,
					   FILE_SHARE_READ | FILE_SHARE_WRITE,
                       NULL,
					   OPEN_EXISTING,
					   FILE_ATTRIBUTE_NORMAL,
					   NULL
             		  );

	if (hFile == INVALID_HANDLE_VALUE)
	{
		OutputDebugString(_T("打开文件失败!"));
		return 0;
	}
    ReadFile(hFile,
		     &dosHeader,
			 sizeof(IMAGE_DOS_HEADER),
             &numR,
			 NULL
			 );

	SetFilePointer(hFile,
		           dosHeader.e_lfanew,
				   NULL,
				   FILE_BEGIN
		            );

	ReadFile(hFile,
		     &ntHeader,
			 sizeof(IMAGE_NT_HEADERS),
             &numR,
			 NULL
			 );
    
	dwImageSize = ntHeader.OptionalHeader.SizeOfImage;
    dwNumOfSections = ntHeader.FileHeader.NumberOfSections;
    dwHeadSize = ntHeader.OptionalHeader.SizeOfHeaders;

   
	
	pBase =(char*)malloc(dwImageSize);
    memset(pBase , 0 , dwImageSize);

    SetFilePointer(hFile , 0 , NULL , FILE_BEGIN);
	ReadFile(hFile, pBase , dwHeadSize ,&numR , NULL);

    pSection = (PIMAGE_SECTION_HEADER)(dosHeader.e_lfanew  
		        + sizeof(ntHeader.Signature)
		        + sizeof(IMAGE_FILE_HEADER)
				+ ntHeader.FileHeader.SizeOfOptionalHeader
				+ (ULONG)pBase);
	
    for (nIndex = 0 , pSection ; nIndex < dwNumOfSections ; nIndex++ ,pSection++)
	{
	   SetFilePointer(hFile , pSection ->PointerToRawData , NULL , FILE_BEGIN);
       ReadFile(hFile , &pBase[pSection->VirtualAddress] , pSection->SizeOfRawData ,&numR ,NULL);
	}

	CloseHandle(hFile);

    return (ULONG)pBase;

}