PE查看器-不知道能不能用，大家试试

1314xxxxxx

代码如下

1. #include <stdio.h>
   
2. #include <stdlib.h>
   
3. typedef int DWORD;
   
4. 
   
5. 
   
6. int main()
   
7. {
   
8.         char dos_header[64];
   
9.     char image_header[20];
   
10.     char optional_header[98];
    
11.    
    
12.     FILE* fp = NULL;
    
13.     DWORD fileSize = 0;
    
14.     char* fileBuffer = NULL;
    
15.     fp = fopen("第29课笔记.exe","rb");                        //把这个“第29课笔记”改成自己要分析的EXE程序的名字。
    
16.     int address = fp;
    
17.     fseek(fp,0L,SEEK_END);
    
18.     fileSize = ftell(fp);
    
19.     fseek(fp,0L,0);
    
20.     fileBuffer = (char*)malloc(fileSize);
    
21.     if(!fileBuffer)
    
22.     {
    
23.                 printf("缓冲区分配失败！");
    
24.     }       
    
25.     fread(fileBuffer,fileSize,1,fp);
    
26.     int i;
    
27.     int d;
    
28.     fseek(fp,0L,0);
    
29.     for(i=0;i<98;i++)
    
30.     {
    
31.                 optional_header[i] = 0x00;
    
32.     }
    
33.    
    
34.     fseek(fp,0L,0);
    
35.    
    
36.     for(i=0;i<64;i++)
    
37.     {
    
38.                 dos_header[i] = (char)fileBuffer[i];
    
39.     }   
    
40.     int address_for_NT_header = dos_header[63]*0x1000000 + dos_header[62]*0x10000 + dos_header[61]*0x100 + dos_header[60];
    
41.     printf("%x\n",address_for_NT_header);
    
42.     int size_of_optional_header;
    
43.     int number_of_rva_and_sizes;
    
44.     int address_of_sections_header;
    
45.     for(i=0;i<20;i++)
    
46.     {
    
47.                 image_header[i] = (char)fileBuffer[i+address_for_NT_header+1];
    
48.         if(i == 17)
    
49.         {
    
50.                         size_of_optional_header = (char)fileBuffer[i+address_for_NT_header+1]*0x100 + (char)fileBuffer[i+address_for_NT_header+1-1];
    
51.         }
    
52.     }
    
53.    
    
54.     for(i=0;i<size_of_optional_header;i++)
    
55.     {
    
56.                 optional_header[i] = (char)fileBuffer[address_for_NT_header+i+1+20];
    
57.         if(i == 98)
    
58.         {
    
59.                         number_of_rva_and_sizes = (char)(fileBuffer[address_for_NT_header+i+1+20]*0x100)+(char)fileBuffer[address_for_NT_header+i+20];
    
60.         }
    
61.     }
    
62.    
    
63.     address_of_sections_header = address_for_NT_header+1+20+244;
    
64.         char section_header[40*number_of_rva_and_sizes];
    
65.         for(i=0;i<(40*number_of_rva_and_sizes);i++)
    
66.     {
    
67.                 section_header[i] = (char)fileBuffer[address_of_sections_header+i];
    
68.     }
    
69.    
    
70.     printf("e_magic:%02x%02x\n",dos_header[1],dos_header[0]);
    
71.     printf("e_cblp:%02x%02x\n",dos_header[3],dos_header[2]);
    
72.     printf("e_cp:%02x%02x\n",dos_header[5],dos_header[4]);
    
73.     printf("e_crlc:%02x%02x\n",dos_header[7],dos_header[6]);
    
74.     printf("e_cparhdr:%02x%02x\n",dos_header[9],dos_header[8]);
    
75.     printf("e_minalloc:%02x%02x\n",dos_header[11],dos_header[10]);
    
76.     printf("e_maxalloc:%02x%02x\n",dos_header[13],dos_header[12]);
    
77.     printf("e_ss:%02x%02x\n",dos_header[15],dos_header[14]);
    
78.     printf("e_sp:%02x%02x\n",dos_header[17],dos_header[16]);
    
79.     printf("e_csum:%02x%02x\n",dos_header[19],dos_header[18]);
    
80.     printf("e_ip:%02x%02x\n",dos_header[21],dos_header[20]);
    
81.     printf("e_cs:%02x%02x\n",dos_header[23],dos_header[22]);
    
82.     printf("e_lfarlc:%02x%02x\n",dos_header[25],dos_header[24]);
    
83.     printf("e_ovno:%02x%02x\n",dos_header[27],dos_header[26]);
    
84.     printf("e_res:%02x%02x %02x%02x %02x%02x %02x%02x\n",dos_header[29],dos_header[28],dos_header[31],dos_header[30],dos_header[33],dos_header[32],dos_header[35],dos_header[34]);
    
85.     printf("e_oemid:%02x%02x\n",dos_header[37],dos_header[36]);
    
86.     printf("e_oeminfo:%02x%02x\n",dos_header[39],dos_header[38]);
    
87.     printf("e_res2:0000 0000 0000 0000 0000 0000 0000 0000 0000 0000\n");
    
88.     printf("e_lfanew:%02x%02x%02x%02x\n",dos_header[63],dos_header[62],dos_header[61],dos_header[60]);
    
89.    
    
90.         printf("Machine:%02x%02x\n",image_header[1],image_header[0]);
    
91.     printf("NumberOfSections:%02x%02x\n",image_header[3],image_header[2]);
    
92.     printf("TimeDateStamp:%02x%02x%02x%02x\n",image_header[7],image_header[6],image_header[5],image_header[4]);
    
93.         printf("PointerToSymbolTable:%02x%02x%02x%02x\n",image_header[11],image_header[10],image_header[9],image_header[8]);
    
94.     printf("NumberOfSymbols:%02x%02x%02x%02x\n",image_header[15],image_header[14],image_header[13],image_header[12]);
    
95.     printf("SizeOfOptionalHeader:%02x%02x\n",image_header[17],image_header[16]);
    
96.     printf("Characteristics:%02x%02x\n",image_header[19],image_header[18]);
    
97.    
    
98.         printf("Magic:%02x%02x",optional_header[1],optional_header[0]);
    
99.     printf("MajorLinkerVersion:%02x",optional_header[2]);
    
100.     printf("MinorLinkerVersion:%02x",optional_header[3]);
     
101.     printf("SizeOfCode:%02x%02x%02x%02x",optional_header[7],optional_header[6],optional_header[5],optional_header[4]);
     
102.     printf("SizeOfInitializedData:%02x%02x%02x%02x",optional_header[11],optional_header[10],optional_header[9],optional_header[8]);
     
103.     printf("SizeOfUninitializedData:%02x%02x%02x%02x",optional_header[15],optional_header[14],optional_header[13],optional_header[12]);
     
104.     printf("AddressOfEntryPoint:%02x%02x%02x%02x",optional_header[19],optional_header[18],optional_header[17],optional_header[16]);
     
105.     printf("BaseOfCode:%02x%02x%02x%02x",optional_header[23],optional_header[22],optional_header[21],optional_header[20]);
     
106.     printf("BaseOfData:%02x%02x%02x%02x",optional_header[27],optional_header[26],optional_header[25],optional_header[24]);
     
107.     printf("ImageBase:%02x%02x%02x%02x",optional_header[31],optional_header[30],optional_header[29],optional_header[28]);
     
108.     printf("SectionAlignment:%02x%02x%02x%02x",optional_header[35],optional_header[34],optional_header[33],optional_header[32]);
     
109.     printf("FileAlignment:%02x%02x%02x%02x",optional_header[39],optional_header[38],optional_header[37],optional_header[36],optional_header[35]);
     
110.     printf("MajorOperatingSystemVersion:%02x%02x",optional_header[41],optional_header[40]);
     
111.     printf("MinorOperatingSystmeVersion:%02x%02x",optional_header[43],optional_header[42]);
     
112.     printf("MajorImageVersion:%02x%02x",optional_header[45],optional_header[44]);
     
113.     printf("MinorImageVersion:%02x%02x",optional_header[47],optional_header[46]);
     
114.     printf("MajorSubsystemVersion:%02x%02x",optional_header[49],optional_header[48]);
     
115.    
     
116.         printf("misc:%02x%02x%02x%02x",section_header[11],section_header[10],section_header[9],section_header[8]);
     
117.     printf("virtualAddress:%02x%02x%02x%02x",section_header[15],section_header[14],section_header[13],section_header[12]);
     
118.     printf("SizeOfRawData:%02x%02x%02x%02x",section_header[19],section_header[18],section_header[17],section_header[16]);
     
119.     printf("pointerToRawData:%02x%02x%02x%02x",section_header[23],section_header[22],section_header[21],section_header[20]);
     
120.         printf("Characteristics:%02x%02x%02x%02x",section_header[39],section_header[37],section_header[36],section_header[35],section_header[34]);
     
121.    
     
122.         getchar();
     
123.     return 0;
     
124. }

复制代码

1314xxxxxx

大家都没回就代表我的代码可以用咯？