zoukankan      html  css  js  c++  java
  • C语言编程获取PE文件DOS头

    #include <windows.h>
    #include <stdio.h>
    #include <tchar.h>
    
    int _tmain(int argc, TCHAR *argv[])
    {
    	PIMAGE_DOS_HEADER pImageDosHeader;
    	HANDLE hFile;
    	HANDLE hMapObject;
    	PUCHAR uFileMap;
    	DWORD dw;
    
    	if (argc<2)
    	{
    		return -1;
    	}
    	
    	if (!(hFile=CreateFile(argv[1],GENERIC_READ,0,NULL,OPEN_EXISTING,0,0)))
    	{
    		return -1;
    	}
    	if (!(hMapObject = CreateFileMapping((hFile),NULL,PAGE_READONLY,0,0,NULL)))
    	{
    		dw = GetLastError(); 
    		return -1;
    	}
    	if (!(uFileMap=MapViewOfFile(hMapObject,FILE_MAP_READ,0,0,0)))
    	{
    		return -1;
    	}
    	pImageDosHeader = (PIMAGE_DOS_HEADER)uFileMap;
    	if (pImageDosHeader->e_magic != IMAGE_DOS_SIGNATURE)
    	{
    		return -1;
    	}
    	printf("e_magic:	0x%04X(%c%c)
    ", pImageDosHeader->e_magic, *uFileMap, *(uFileMap + 1));
    	printf("e_lfanew:	0x%08X
    ",pImageDosHeader->e_lfanew);
    	UnmapViewOfFile(uFileMap);
    	CloseHandle(hMapObject);
    	CloseHandle(hFile);
    	return 0;
    }

  • 相关阅读:
    Dubbo监控中心
    Dubbo 提供者配置&测试
    IDEA中pom.xml依赖另一个项目
    MBG
    查询优化技术之多级缓存
    分布式扩展流程
    Redis取值时取出的是HashMap
    linux执行sql
    Git的使用
    405
  • 原文地址:https://www.cnblogs.com/AlexanderZhao/p/12878959.html
Copyright © 2011-2022 走看看