encrypt.h

原理：对Pe文件的.data节

// Encrypt.h: interface for the Encrypt class.
//
//////////////////////////////////////////////////////////////////////

#if !defined(AFX_ENCRYPT_H__96E569C4_965C_425D_8343_B7C5458646E8__INCLUDED_)
#define AFX_ENCRYPT_H__96E569C4_965C_425D_8343_B7C5458646E8__INCLUDED_
#include "PE.h"
#if _MSC_VER > 1000
#pragma once
#endif // _MSC_VER > 1000

class Encrypt :public CPE
{
public:
	Encrypt();
	virtual ~Encrypt();
    bool CheckIfEncrypted(PIMAGE_SECTION_HEADER pSection);
	void Encrypt_sections(PIMAGE_SECTION_HEADER pSection);
	void Xor_Section(PIMAGE_SECTION_HEADER pSection);
	void InjectLoader(DWORD InjectAddr);
	//Loader();
	void CalculateOldEntryPoint();
	void CalculateRVAEndOfSectionTable();
	void InitGloablForAsm();
	//DWORD GetFunctionRVA(void* FuncName);
public:
	bool IsEncrypted;
	DWORD OldEntryPoint;
    DWORD RVAOfEndSectionTable;

};

#endif // !defined(AFX_ENCRYPT_H__96E569C4_965C_425D_8343_B7C5458646E8__INCLUDED_)