修改PE文件自校验值

/*

*@修改PE头checksum

:szFileName]*@param1[in]:szFileName:可执行文件完整路径

:dwCheckSum]*@param2[in]:dwCheckSum:新的checksum

*@return:修改成功返回TRUE，否则返回FALSE

*/

BOOL SetExeCheckSum(LPCSTR szFileName,DWORD dwCheckSum)

{

HANDLE hFile = INVALID_HANDLE_VALUE;

HANDLE hMapping = NULL;

LPVOID lpBase = NULL;

BOOL bRet = FALSE;

try

{

hFile = CreateFile(szFileName,GENERIC_READ|GENERIC_WRITE,FILE_SHARE_READ,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,NULL);

if (hFile == INVALID_HANDLE_VALUE)

throw MY_ERROR;

hMapping = CreateFileMapping(hFile,NULL,PAGE_READWRITE,0,0,NULL);

if (hMapping == NULL)

throw MY_ERROR;

lpBase = MapViewOfFile(hMapping,FILE_MAP_ALL_ACCESS,0,0,0);

if (lpBase == NULL)

throw MY_ERROR;

PIMAGE_DOS_HEADER pDosHeader = (PIMAGE_DOS_HEADER)lpBase;

if (IsBadReadPtr(pDosHeader,sizeof(IMAGE_DOS_HEADER)) ||

pDosHeader->e_magic != IMAGE_DOS_SIGNATURE)

throw MY_ERROR;

PIMAGE_NT_HEADERS pNtHeader = (PIMAGE_NT_HEADERS)((DWORD)pDosHeader + pDosHeader->e_lfanew);

if (IsBadReadPtr(pNtHeader,sizeof(IMAGE_NT_HEADERS)) ||

pNtHeader->Signature != IMAGE_NT_SIGNATURE)

throw MY_ERROR;

PIMAGE_OPTIONAL_HEADER pOptHeader = &pNtHeader->OptionalHeader;

if (IsBadReadPtr(pOptHeader,sizeof(IMAGE_OPTIONAL_HEADER)))

throw MY_ERROR;

pOptHeader->CheckSum = dwCheckSum;

bRet = FlushViewOfFile(&pOptHeader->CheckSum,sizeof(DWORD));

throw MY_OK;

}

catch(...)

{

if (lpBase != NULL)

UnmapViewOfFile(lpBase);

if (hMapping != NULL)

CloseHandle(hMapping);

if (hFile != INVALID_HANDLE_VALUE)

CloseHandle(hFile);

}

return bRet;

}