1K字节的半透明窗体 - debug吧

level 6

blueglass2 楼主

GOTO ALPHA
E000  4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00
E010  B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00
E030  00 00 00 00 00 00 00 00 00 00 00 00 C8 00 00 00
F040 0C0 00
E0C0  00 00 00 00 00 00 00 00 50 45 00 00 4C 01 01 00
E0D0  5C 9D 10 4A 00 00 00 00 00 00 00 00 E0 00 0F 01
E0E0  0B 01 06 00 00 00 00 00 00 04 00 00 00 00 00 00
E0F0  68 10 00 00 00 10 00 00 00 10 00 00 00 00 40 00
E100  00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00
E110  04 00 00 00 00 00 00 00 00 20 00 00 00 02 00 00
E120  00 00 00 00 02 00 00 00 00 00 10 00 00 10 00 00
E130  00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00
E140  00 00 00 00 00 00 00 00 28 11 00 00 3C 00 00 00
F150 1A0 00
E1A0  00 10 00 00 28 00 00 00 00 00 00 00 00 00 00 00
F1B0 1C0 00
E1C0  42 6C 75 65 53 65 63 00 32 02 00 00 00 10 00 00
E1D0  00 04 00 00 00 02 00 00 00 00 00 00 00 00 00 00
E1E0  00 00 00 00 40 00 00 C0 00 00 00 00 00 00 00 00
F1F0 200 00
E200  9E 11 00 00 8C 11 00 00 00 00 00 00 C0 11 00 00
E210  D0 11 00 00 DE 11 00 00 F2 11 00 00 06 12 00 00
E220  14 12 00 00 00 00 00 00 55 73 65 72 33 32 00 00
E230  53 65 74 4C 61 79 65 72 65 64 57 69 6E 64 6F 77
E240  41 74 74 72 69 62 75 74 65 73 00 00 23 33 32 37

2009年05月31日 06点05分 1

level 6

blueglass2 楼主

以上代码保存为任意名.BAT，点击运行后会编译成一个半透明窗体,
这是我用C++写的,Release模式编译为1.5K,貌似1k是win32pe文件
的极限了,因为pe文件最小也不能小于一页. 源程序如下：
#include <windows.h>
#pragma comment(linker, "/ENTRY:main")
#pragma comment(linker, "/OPT:NOWIN98")
#pragma comment(linker, "/SECTION:BlueSec,")
#pragma comment(linker, "/MERGE:.data=BlueSec")
#pragma comment(linker, "/MERGE:.text=BlueSec")
#pragma comment(linker, "/MERGE:.rdata=BlueSec")
#pragma comment(linker, "/MERGE:.rsrc=BlueSec")
#pragma comment(linker, "/MERGE:.reloc=BlueSec")
int main(void){
HWND hwnd=CreateWindowEx(0x80000,"#32770","透明窗体blueglass2",
0xcf0000,120,80,420,320,0,0,(HINSTANCE)0x400000,0);
if(hwnd){
GetProcAddress(GetModuleHandle("User32"),"SetLayeredWindowAttributes");
__asm {
push 2
push 200
push 0
push hwnd
call eax
}
ShowWindow(hwnd,5);
MSG msg;
do{
DispatchMessage(&msg);
TranslateMessage(&msg);
if(msg.wParam==VK_ESCAPE)break;
}while(GetMessage(&msg,0,0,0));
DestroyWindow(hwnd);
}return 0;
}

2009年05月31日 06点05分 3

大头神大头神

楼主怎么C++转debug的？

2014年07月08日 00点07分

level 4

专业的电脑医生

o(∩_∩)o...

2009年05月31日 09点05分 4

level 0

222.18.59.*

怎么关啊？

2009年11月17日 11点11分 5

level 1

断了的猫

高人...不妨解释一下哈... 我们菜鸟看不懂...
#pragma comment(linker, "/ENTRY:main")
#pragma comment(linker, "/OPT:NOWIN98")
#pragma comment(linker, "/SECTION:BlueSec,")
#pragma comment(linker, "/MERGE:.data=BlueSec")
#pragma comment(linker, "/MERGE:.text=BlueSec")
#pragma comment(linker, "/MERGE:.rdata=BlueSec")
#pragma comment(linker, "/MERGE:.rsrc=BlueSec")
#pragma comment(linker, "/MERGE:.reloc=BlueSec")
--------
这是什么啊?

2009年12月10日 11点12分 6

level 1

郭宛人吹吹嘘k

PE程序最小可以到512字节，最小1K是在9X下的极限
在NT下完全可以到达512,楼上的程序还可以缩水，代码段可以压缩，用一个小的stub解压缩

2010年01月06日 00点01分 7

level 1

郭宛人吹吹嘘k

#pragma comment(linker, "/ENTRY:main")   //修改程序入口点是main而不是系统的WinMainCRTStartup
#pragma comment(linker, "/OPT:NOWIN98")   // 文件对齐0x200而不是兼容98的4K
#pragma comment(linker, "/SECTION:BlueSec,")   // 建立一个节，节名叫BlueSec
#pragma comment(linker, "/MERGE:.data=BlueSec")
#pragma comment(linker, "/MERGE:.text=BlueSec")
#pragma comment(linker, "/MERGE:.rdata=BlueSec")
#pragma comment(linker, "/MERGE:.rsrc=BlueSec")
#pragma comment(linker, "/MERGE:.reloc=BlueSec")
// 把.data,.text,.radata等节合并到BlueSec节中
.rsrc,.reloc，资源节和重定位节在这个程序中并不会生成

2010年01月06日 00点01分 8