资源简介
介绍用vc编程实现文件动态捆绑的方法,从而达到隐藏进程信息的目的
代码片段和文件信息
#include “stdafx.h“
#include
#include
#include
#include “psapi.h“
struct PE_Header
{
unsigned long signature;
unsigned short machine;
unsigned short numSections;
unsigned long timeDateStamp;
unsigned long pointerToSymbolTable;
unsigned long numOfSymbols;
unsigned short sizeOfOptionHeader;
unsigned short characteristics;
};
struct PE_ExtHeader
{
unsigned short magic;
unsigned char majorlinkerVersion;
unsigned char minorlinkerVersion;
unsigned long sizeOfCode;
unsigned long sizeOfInitializedData;
unsigned long sizeOfUninitializedData;
unsigned long addressOfEntryPoint;
unsigned long baseOfCode;
unsigned long baseOfData;
unsigned long imagebase;
unsigned long sectionAlignment;
unsigned long fileAlignment;
unsigned short majorOSVersion;
unsigned short minorOSVersion;
unsigned short majorImageVersion;
unsigned short minorImageVersion;
unsigned short majorSubsystemVersion;
unsigned short minorSubsystemVersion;
unsigned long reserved1;
unsigned long sizeOfImage;
unsigned long sizeOfHeaders;
unsigned long checksum;
unsigned short subsystem;
unsigned short DLLCharacteristics;
unsigned long sizeOfStackReserve;
unsigned long sizeOfStackCommit;
unsigned long sizeOfHeapReserve;
unsigned long sizeOfHeapCommit;
unsigned long loaderFlags;
unsigned long numberOfRVAAndSizes;
unsigned long exportTableAddress;
unsigned long exportTableSize;
unsigned long importTableAddress;
unsigned long importTableSize;
unsigned long resourceTableAddress;
unsigned long resourceTableSize;
unsigned long exceptionTableAddress;
unsigned long exceptionTableSize;
unsigned long certFilePointer;
unsigned long certTableSize;
unsigned long relocationTableAddress;
unsigned long relocationTableSize;
unsigned long debugDataAddress;
unsigned long debugDataSize;
unsigned long archDataAddress;
unsigned long archDataSize;
unsigned long globalPtrAddress;
unsigned long globalPtrSize;
unsigned long TLSTableAddress;
unsigned long TLSTableSize;
unsigned long loadConfigTableAddress;
unsigned long loadConfigTableSize;
unsigned long boundImportTableAddress;
unsigned long boundImportTableSize;
unsigned long importAddressTableAddress;
unsigned long importAddressTableSize;
unsigned long delayImportDescAddress;
unsigned long delayImportDescSize;
unsigned long COMHeaderAddress;
unsigned long COMHeaderSize;
unsigned long reserved2;
unsigned long reserved3;
};
struct SectionHeader
{
unsigned char sectionName[8];
unsigned long virtualSize;
unsigned long virtualAddress;
unsigned long sizeOfRawData;
unsigned long pointerToRawData;
unsigned long pointerToRelocations;
unsigned long p
属性 大小 日期 时间 名称
----------- --------- ---------- ----- ----
文件 168030 2008-08-06 10:24 代码\Debug\loadEXE.exe
文件 62764 2008-08-06 10:24 代码\Debug\loadEXE.obj
文件 2296 2008-07-28 21:13 代码\Debug\StdAfx.obj
文件 148480 2008-08-06 10:24 代码\Debug\vc60.idb
文件 226308 2008-08-06 10:24 代码\Debug\loadEXE.ilk
文件 187396 2008-07-28 21:13 代码\Debug\loadEXE.pch
文件 467968 2008-08-06 10:24 代码\Debug\loadEXE.pdb
文件 241664 2008-08-06 10:24 代码\Debug\vc60.pdb
文件 1214 2008-07-28 21:10 代码\ReadMe.txt
文件 6632 2004-07-26 14:35 代码\Psapi.h
文件 667 2008-07-28 21:10 代码\StdAfx.h
文件 15852 2008-08-06 10:24 代码\loadEXE.cpp
文件 294 2008-07-28 21:10 代码\StdAfx.cpp
文件 4548 2008-07-28 21:10 代码\loadEXE.dsp
文件 539 2008-07-28 21:10 代码\loadEXE.dsw
文件 58368 2008-08-06 10:24 代码\loadEXE.ncb
文件 53760 2008-08-06 10:24 代码\loadEXE.opt
文件 1298 2008-08-06 10:24 代码\loadEXE.plg
文件 32768 2008-07-29 18:27 代码\~VCCD.tmp
文件 0 2008-07-29 18:27 代码\~VCCE.tmp
目录 0 2008-09-10 09:40 代码\Debug
目录 0 2008-09-10 09:40 代码
----------- --------- ---------- ----- ----
1680846 22
- 上一篇:人工蜂群算法源代码c++,matlab
- 下一篇:3D赛车小游戏(DX学习)
评论
共有 条评论