汇编代码之修改文件时间

韩冰

by: 冰狐浪子 from:http://www.icyfoxlovelace.com/

6 L) a5 A7 b, y

既然有兄弟需要原代码，我也就贴出来算拉，免得一个个发！,使用请参照“修改文件时间,保护asp木马” 8 ^4 @1 d, ^8 y4 n$ P; ]$ q$ H * L- I/ q- A" g- Q( Z/ b修改文件时间例子.asm - Y+ ]3 l3 g% b8 v1 ] .386 ( g1 g. t- K& J) U .model flat, stdcall / X/ O* i5 a! ]3 N6 z8 s7 T5 A5 q2 j option casemap :none 6 W+ K& s8 w# j5 Z4 D. q/ C. k;[转载请保留出处] ;作者:冰狐浪子 [http://www.icyfoxlovelace.com] ;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> ; Include 文件定义 ;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> include windows.inc : O1 [3 y9 S& Kinclude kernel32.inc includelib kernel32.lib 4 g: u5 H2 ? S7 s0 p% g0 f0 B .code 7 ?; X \6 R( \1 c_TimeC proc @_szFileName1,@_szFileName2 6 d8 k' [7 d% P m1 v; t3 g local @hFile ;文件句柄 - V. ^& b) x, Y! y. {/ j local @Crtime: FILETIME 5 P7 u8 }+ U% ^! } local @Latime: FILETIME local @Lwtime: FILETIME " N6 ^3 q$ [3 R ;打开文件 4 T U8 O1 ^! E, ?* g/ j* K1 i invoke CreateFile, @_szFileName1, GENERIC_READ, FILE_SHARE_READ or \ FILE_SHARE_WRITE, 0, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL,0 . y) v% p+ p) ~* I& \( u cmp eax,INVALID_HANDLE_VALUE - a4 j; L" _: i/ k! i/ b# R je _@exit0 mov @hFile,eax ;复制文件句柄 # o6 M% O9 z! ^6 E. M" \ invoke GetFileTime,@hFile,addr @Crtime,addr @Latime,addr @Lwtime invoke CloseHandle,@hFile ;关闭文件 0 m! ]& `: s6 U invoke CreateFile, @_szFileName2,GENERIC_WRITE, FILE_SHARE_READ or \ 8 B/ l/ e% X' ^, a FILE_SHARE_WRITE, 0, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL,0 1 e4 h# K# ?5 ~) R: Y cmp eax,INVALID_HANDLE_VALUE je _@exit0 # V9 T0 J, ]3 ~" \: w0 y8 B mov @hFile,eax ;复制文件句柄 invoke SetFileTime,@hFile,addr @Crtime,addr @Latime,addr @Lwtime 5 P9 ^, C1 Q9 d! {: X invoke CloseHandle,@hFile ;关闭文件 _@exit0: ret 9 X. A- m$ ]% i' q_TimeC endp ' ]3 e* Y* }: N" f4 ]8 D' {start: , [" L& O; {+ s5 J, E+ Q2 t 4 ?8 w$ i3 J0 l0 P; v( P invoke GetCommandLine q% n3 k# o% ~+ }" R* n mov esi,eax 5 K% S7 Q% _4 t cld 7 g& I4 U5 F4 ?# t2 T4 u_argc_loop: lodsb + b* J! \ h1 a& v or al,al jz _argc_end cmp al,' ' jz _argc_end cmp al,'"' 6 \% c6 F& S( a& I9 _1 x9 K jnz _argc_loop - |) U9 y% C4 X& v5 b* S: W @@: lodsb or al,al jz _argc_end cmp al,'"' jnz @B & k- o5 }7 C$ k! P7 z9 p2 I1 B jmp _argc_loop _argc_end: , X8 K$ x& b h3 T/ Ymov edi,esi G S! F4 c! B% K/ u6 @cmp byte ptr [esi],'"' ; J, {! w( f9 Q* G; m7 ~" Cjnz @F inc edi ) o& S4 @& M( K6 B@@: % R2 y" a. v0 B9 A8 f _argc_loop1: lodsb ; c3 B5 R- C4 @2 `" _2 y# L" W7 P6 E or al,al 3 J" w% y; ?7 i jz _argc_end1 ' i' b, l" y O8 I% ] cmp al,' ' jz _argc_end1 w8 p2 Y. n; s1 f4 r5 H cmp al,'"' 9 o. l" W# L5 |' q+ m# Z8 p jnz _argc_loop1 5 N; h: V; B0 b- {) A @@: 5 |) `* u m$ c0 i: I4 o2 Q lodsb e2 X8 v& L% {6 }: q or al,al / o: Q" {% k d jz _argc_end1 cmp al,'"' 0 A- J, `3 x, T1 Y' K jnz @B jmp _argc_loop1 ' F; T" s# P# g9 x$ Q# ]6 {_argc_end1: 8 n+ t/ i" m3 L& B; I& A 5 T& L! K" z- i* S# ~# B0 Hcmp byte ptr [esi-2],'"' 2 V- J, {( H- J9 _ r8 ^4 mjnz @F mov byte ptr [esi-2],0 @@: : h3 E& C6 Z! v) tmov byte ptr [esi-1],0 invoke _TimeC,edi,esi [8 n4 p( N, K, iret 8 G' S$ v# \& I7 V/ C3 `' @. x end start

1 K- o: J- F) Y; e2 ]4 P) M