secheader.pas

Delphi写的PE查看器

{******************************************************************************}
{Copyright(C) 2007,Pefine Security Lab                                         }
{All rights reserved.                                                          }
{                                                                              }
{Abstract:View Win32 PE file information.                                      }
{                                                                              }
{Version:1.01                                                                  }
{Author:WindRand                                                               }
{Date:2007-01-20                                                               }
{******************************************************************************}
unit SecHeader;

interface

uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, StdCtrls, Sections, JwaWinNT;

type
  TSecHeaderFrm = class(TForm)
    Button1: TButton;
    Button2: TButton;
    GroupBox1: TGroupBox;
    Label1: TLabel;
    NEdit: TEdit;
    VAEdit: TEdit;
    VSEdit: TEdit;
    ROEdit: TEdit;
    RSEdit: TEdit;
    FEdit: TEdit;
    Label2: TLabel;
    Label3: TLabel;
    Label4: TLabel;
    Label5: TLabel;
    Label6: TLabel;
    CharMBtn: TButton;
    procedure Button1Click(Sender: TObject);
    procedure Button2Click(Sender: TObject);
    procedure CharMBtnClick(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  SecHeaderFrm: TSecHeaderFrm;

implementation

uses SecFlag;

{$R *.dfm}

procedure TSecHeaderFrm.Button1Click(Sender: TObject);
begin
  ModalResult:=mrok;
end;

procedure TSecHeaderFrm.Button2Click(Sender: TObject);
begin
  Close;
end;

function BeTrue(fg,Value:Cardinal):Boolean;
begin
  Result:=fg and not Value=0;
end;

procedure TSecHeaderFrm.CharMBtnClick(Sender: TObject);
begin
  with TSecFlagFrm.Create(self) do
    begin
      Left:=(Screen.Width div 2)-(Width div 2);
      Top:=(Screen.Height div 2)-(Height div 2);
      CheckBox1.Checked:=BeTrue(IMAGE_SCN_MEM_SHARED,SectionsFrm.TempSecChar);
      CheckBox2.Checked:=BeTrue(IMAGE_SCN_MEM_EXECUTE,SectionsFrm.TempSecChar);
      CheckBox3.Checked:=BeTrue(IMAGE_SCN_MEM_READ,SectionsFrm.TempSecChar);
      CheckBox4.Checked:=BeTrue(IMAGE_SCN_MEM_WRITE,SectionsFrm.TempSecChar);
      CheckBox5.Checked:=BeTrue(IMAGE_SCN_LNK_NRELOC_OVFL,SectionsFrm.TempSecChar);
      CheckBox6.Checked:=BeTrue(IMAGE_SCN_MEM_DISCARDABLE,SectionsFrm.TempSecChar);
      CheckBox7.Checked:=BeTrue(IMAGE_SCN_MEM_NOT_CACHED,SectionsFrm.TempSecChar);
      CheckBox8.Checked:=BeTrue(IMAGE_SCN_MEM_NOT_PAGED,SectionsFrm.TempSecChar);
      CheckBox9.Checked:=BeTrue(IMAGE_SCN_LNK_COMDAT,SectionsFrm.TempSecChar);
      CheckBox10.Checked:=BeTrue(IMAGE_SCN_LNK_INFO,SectionsFrm.TempSecChar);
      CheckBox11.Checked:=BeTrue(IMAGE_SCN_LNK_REMOVE,SectionsFrm.TempSecChar);
      CheckBox12.Checked:=BeTrue(IMAGE_SCN_CNT_CODE,SectionsFrm.TempSecChar);
      CheckBox13.Checked:=BeTrue(IMAGE_SCN_CNT_INITIALIZED_DATA,SectionsFrm.TempSecChar);
      CheckBox14.Checked:=BeTrue(IMAGE_SCN_CNT_UNINITIALIZED_DATA,SectionsFrm.TempSecChar);
      CheckBox15.Checked:=BeTrue(IMAGE_SCN_TYPE_NO_PAD,SectionsFrm.TempSecChar);
      if BeTrue(IMAGE_SCN_ALIGN_1BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=1;
      if BeTrue(IMAGE_SCN_ALIGN_2BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=2;
      if BeTrue(IMAGE_SCN_ALIGN_4BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=3;
      if BeTrue(IMAGE_SCN_ALIGN_8BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=4;
      if BeTrue(IMAGE_SCN_ALIGN_16BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=5;
      if BeTrue(IMAGE_SCN_ALIGN_32BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=6;
      if BeTrue(IMAGE_SCN_ALIGN_64BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=7;
      if BeTrue(IMAGE_SCN_ALIGN_128BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=8;
      if BeTrue(IMAGE_SCN_ALIGN_256BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=9;
      if BeTrue(IMAGE_SCN_ALIGN_512BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=10;
      if BeTrue(IMAGE_SCN_ALIGN_1024BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=11;
      if BeTrue(IMAGE_SCN_ALIGN_2048BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=12;
      if BeTrue(IMAGE_SCN_ALIGN_4096BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=13;
      if BeTrue(IMAGE_SCN_ALIGN_8192BYTES,SectionsFrm.TempSecChar)=True then
        Combobox1.ItemIndex:=14;
      if (BeTrue(IMAGE_SCN_ALIGN_1BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_2BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_4BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_8BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_16BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_32BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_64BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_128BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_256BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_512BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_1024BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_2048BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_4096BYTES,SectionsFrm.TempSecChar)=False) and
         (BeTrue(IMAGE_SCN_ALIGN_8192BYTES,SectionsFrm.TempSecChar)=False) then
           Combobox1.ItemIndex:=0;
      ValueLabel.Caption:=FEdit.Text;     
      if ShowModal=mrok then
        begin
          FEdit.Text:=IntToHex(SecFlagCount,8);
        end;
    end; 
end;

end.