功能: 主要实现 对PE头信息的读取

因为以前在命名行实现过对PE信息的读取, 这里只是 变成界面显示, 没啥技术要点

展示:

主要代码:

VOID SetPeInfoText(HWND hwndDlg,LPSTR lpszFile)

{

	



	LPVOID pFileBuffer = NULL;

	PIMAGE_DOS_HEADER pDosHeader = NULL;

	PIMAGE_NT_HEADERS pNTHeader = NULL;

	PIMAGE_FILE_HEADER pPEHeader = NULL;

	PIMAGE_OPTIONAL_HEADER32 pOptionHeader = NULL;

	PIMAGE_SECTION_HEADER pSectionHeader = NULL;

	



	pFileBuffer = ReadPEFile(lpszFile);

	if(!pFileBuffer)

	{

		//printf("文件读取失败\n");

		MessageBox(0,TEXT("文件读取失败"),TEXT("失败"),0);

		return;

	}



	//MZ标志

	if(*((PWORD)pFileBuffer)!=IMAGE_DOS_SIGNATURE)

	{

		//printf("不是有效的MZ标志\n");

		MessageBox(0,TEXT("不是有效的MZ标志"),TEXT("非PE文件"),0);

		free(pFileBuffer);

		return;

	}

	pDosHeader = (PIMAGE_DOS_HEADER)pFileBuffer;

	

	//判断是否是有效的PE 

	if(*((PDWORD)((DWORD)pFileBuffer+pDosHeader->e_lfanew))!=IMAGE_NT_SIGNATURE)

	{

		//printf("不是有效的PE标志\n");

		MessageBox(0,TEXT("不是有效的PE标志"),TEXT("非PE文件"),0);

		free(pFileBuffer);

		return;

	}



	pNTHeader = (PIMAGE_NT_HEADERS)((DWORD)pFileBuffer+pDosHeader->e_lfanew);

	pPEHeader = (PIMAGE_FILE_HEADER)(((DWORD)pNTHeader)+4);

	//NT头

	

	HWND hSectionsNum = GetDlgItem(hwndDlg,IDC_EDIT_SECNUM);

	TCHAR tSecNum[10];

	sprintf(tSecNum,"%04X",pPEHeader->NumberOfSections);

	SendMessage(hSectionsNum,WM_SETTEXT,0,(long)tSecNum);



	HWND hTimeStamp = GetDlgItem(hwndDlg,IDC_EDIT_TIMESTAMP);

	TCHAR tTimeStamp[10];

	sprintf(tTimeStamp,"%08X",pPEHeader->TimeDateStamp);

	SendMessage(hTimeStamp,WM_SETTEXT,0,(long)tTimeStamp);

	

	HWND hSpecCode = GetDlgItem(hwndDlg,IDC_EDIT_SPECCODE);

	TCHAR tSpecCode[10];

	sprintf(tSpecCode,"%04X",pPEHeader->Characteristics);

	SendMessage(hSpecCode,WM_SETTEXT,0,(long)tSpecCode);



	

	HWND hOptionHead = GetDlgItem(hwndDlg,IDC_EDIT_OPTIONHEAD);

	TCHAR tOptionHead[10];

	sprintf(tOptionHead,"%04X",pPEHeader->SizeOfOptionalHeader);

	SendMessage(hOptionHead,WM_SETTEXT,0,(long)tOptionHead);

	



	//可选PE头

	pOptionHeader = (PIMAGE_OPTIONAL_HEADER32)((DWORD)pPEHeader+IMAGE_SIZEOF_FILE_HEADER);

	

	HWND hOEP = GetDlgItem(hwndDlg,IDC_EDIT_ENTRYPOINT);

	TCHAR tOEP[10];

	sprintf(tOEP,"%08X",pOptionHeader->AddressOfEntryPoint);

	SendMessage(hOEP,WM_SETTEXT,0,(long)tOEP);

	

	HWND hBaseAddress = GetDlgItem(hwndDlg,IDC_EDIT_BASEADDRESS);

	TCHAR tBaseAddress[10];

	sprintf(tBaseAddress,"%08X",pOptionHeader->ImageBase);

	SendMessage(hBaseAddress,WM_SETTEXT,0,(long)tBaseAddress);

	

	HWND hImageSize = GetDlgItem(hwndDlg,IDC_EDIT_IMAGESIZE);

	TCHAR tImageSize[10];

	sprintf(tImageSize,"%08X",pOptionHeader->SizeOfImage);

	SendMessage(hImageSize,WM_SETTEXT,0,(long)tImageSize);

	

	HWND hCodeBase = GetDlgItem(hwndDlg,IDC_EDIT_CODEBASE);

	TCHAR tCodeBase[10];

	sprintf(tCodeBase,"%08X",pOptionHeader->BaseOfCode);

	SendMessage(hCodeBase,WM_SETTEXT,0,(long)tCodeBase);

	

	HWND hDataBase = GetDlgItem(hwndDlg,IDC_EDIT_DATABASE);

	TCHAR tDataBase[10];

	sprintf(tDataBase,"%08X",pOptionHeader->BaseOfData);

	SendMessage(hDataBase,WM_SETTEXT,0,(long)tDataBase);

	

	HWND hMemAlign= GetDlgItem(hwndDlg,IDC_EDIT_MEM);

	TCHAR tMemAlign[10];

	sprintf(tMemAlign,"%08X",pOptionHeader->SectionAlignment);

	SendMessage(hMemAlign,WM_SETTEXT,0,(long)tMemAlign);



	HWND hFileAlign= GetDlgItem(hwndDlg,IDC_EDIT_FILE);

	TCHAR tFileAlign[10];

	sprintf(tFileAlign,"%08X",pOptionHeader->FileAlignment);

	SendMessage(hFileAlign,WM_SETTEXT,0,(long)tFileAlign);



	HWND hBZZ= GetDlgItem(hwndDlg,IDC_EDIT_BIAOZHIZI);

	TCHAR tBZZ[10];

	sprintf(tBZZ,"%04X",pOptionHeader->Magic);

	SendMessage(hBZZ,WM_SETTEXT,0,(long)tBZZ);

	

	/*

	IDC_EDIT1_MENUNUM

	*/

	

	HWND hSubSystem = GetDlgItem(hwndDlg,IDC_EDIT_SUBSYSTEM);

	TCHAR tSubSystem[10];

	sprintf(tSubSystem,"%04X",pOptionHeader->Subsystem);

	SendMessage(hSubSystem,WM_SETTEXT,0,(long)tSubSystem);



	HWND hSizeHead = GetDlgItem(hwndDlg,IDC_EDIT_HEADSIZE);

	TCHAR tSizeHead[10];

	sprintf(tSizeHead,"%08X",pOptionHeader->SizeOfHeaders);

	SendMessage(hSizeHead,WM_SETTEXT,0,(long)tSizeHead);



	HWND hAddNum = GetDlgItem(hwndDlg,IDC_EDIT_ADDNUM);

	TCHAR tAddNum[10];

	sprintf(tAddNum,"%08X",pOptionHeader->CheckSum);

	SendMessage(hAddNum,WM_SETTEXT,0,(long)tAddNum);



	HWND hMenuNum = GetDlgItem(hwndDlg,IDC_EDIT_MENUNUM);

	TCHAR tMenuNum[10];

	sprintf(tMenuNum,"%08X",pOptionHeader->NumberOfRvaAndSizes);

	SendMessage(hMenuNum,WM_SETTEXT,0,(long)tMenuNum);



	

	free(pFileBuffer);	

}