【原创】PE检测工具

void CPECheckDlg::OnBtnbrowse()
{
// TODO: Add your control notification handler code here
CFileDialog dlg(TRUE);
if (dlg.DoModal()!=IDOK)   //如果用户没有选择确定按钮，则退出
{
return;
}
HANDLE hFile=::CreateFile(dlg.GetPathName(),GENERIC_READ,FILE_SHARE_READ,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,NULL);
SetDlgItemText(IDC_EDIT_FILEPATH,dlg.GetPathName());
if (hFile==INVALID_HANDLE_VALUE)
{
AfxMessageBox("无效的文件",MB_OK);
}
IMAGE_DOS_HEADER dosHeader;
IMAGE_NT_HEADERS32 ntHeader;

BOOL bValid=FALSE;
DWORD dwRead;
::ReadFile(hFile,&dosHeader,sizeof(dosHeader),&dwRead,NULL);
if(dwRead==sizeof(dosHeader))
{
if(dosHeader.e_magic==IMAGE_DOS_SIGNATURE)
{
if(::SetFilePointer(hFile,dosHeader.e_lfanew,NULL,FILE_BEGIN)!=-1)
{
::ReadFile(hFile,&ntHeader,sizeof(ntHeader),&dwRead,NULL);
if(ntHeader.Signature==IMAGE_NT_SIGNATURE)
bValid=TRUE;
}
}
}
if(bValid)
//MessageBox("是一个PE格式的文件","提示",MB_OK);
SetDlgItemText(IDC_EDIT_RESULT,"该文件是一个PE文件");
else
{
//MessageBox("不是一个PE格式的文件","提示",MB_OK);
SetDlgItemText(IDC_EDIT_RESULT,"该文件不是一个PE文件");
}
::CloseHandle(hFile);
return;
}

void CPECheckDlg::OnDropFiles(HDROP hDropInfo)
{
// TODO: Add your message handler code here and/or call default
UINT count;
char filePath[256];

count = DragQueryFile(hDropInfo, 0xFFFFFFFF, NULL, 0);
if(count)
{
for(UINT i=0; i<count; i++)
{
int pathLen = DragQueryFile(hDropInfo, i, filePath, sizeof(filePath));
//AfxMessageBox(filePath);
SetDlgItemText(IDC_EDIT_FILEPATH,filePath);
}
}

DragFinish(hDropInfo);

HANDLE hFile=::CreateFile(filePath,GENERIC_READ,FILE_SHARE_READ,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,NULL);
//SetDlgItemText(IDC_EDIT_FILEPATH,filePath);
if (hFile==INVALID_HANDLE_VALUE)
{
AfxMessageBox("无效的文件",MB_OK);
}
IMAGE_DOS_HEADER dosHeader;
IMAGE_NT_HEADERS32 ntHeader;

BOOL bValid=FALSE;
DWORD dwRead;
::ReadFile(hFile,&dosHeader,sizeof(dosHeader),&dwRead,NULL);
if(dwRead==sizeof(dosHeader))
{
if(dosHeader.e_magic==IMAGE_DOS_SIGNATURE)
{
if(::SetFilePointer(hFile,dosHeader.e_lfanew,NULL,FILE_BEGIN)!=-1)
{
::ReadFile(hFile,&ntHeader,sizeof(ntHeader),&dwRead,NULL);
if(ntHeader.Signature==IMAGE_NT_SIGNATURE)
bValid=TRUE;
}
}
}
if(bValid)
//MessageBox("是一个PE格式的文件","提示",MB_OK);
SetDlgItemText(IDC_EDIT_RESULT,"该文件是一个PE文件");
else
{
//MessageBox("不是一个PE格式的文件","提示",MB_OK);
SetDlgItemText(IDC_EDIT_RESULT,"该文件不是一个PE文件");
}
::CloseHandle(hFile);

CDialog::OnDropFiles(hDropInfo);
}