Location:
Search - PE header
Search list
Description: 自动解析Windows下可执行文件PE文件头，代码规范有注释，是学习PE结构的好资料-windows PE file header study
Platform: |
Size: 25600 |
Author: goodone |
Hits:
Description: A source code for PE files header extraction
Platform: |
Size: 64512 |
Author: sag |
Hits:
Description: 主要系统的讨论可执行文件头即PE文件头的各类修改，即为PE文件头可变形技术。-Discussion of the main executable file system that is the first head of the various types of PE files modified, which is PE file header deformable technology.
Platform: |
Size: 1839104 |
Author: linews |
Hits:
Description: Portable Executable (PE) File Header.
Platform: |
Size: 19456 |
Author: yf |
Hits:
Description: 也是一个用于查看PE文件头的程序，对于深入研究一些底层的东西很有用-Is also a PE file header for viewing the program, for in-depth study of some low-level stuff is useful
Platform: |
Size: 726016 |
Author: 韩一君 |
Hits:
Description: Full PE files structures definitions in one header and all commented.
Platform: |
Size: 13312 |
Author: Pudn4everFF |
Hits:
Description: 功能极为强大的可视化汉化集成工具，可直接浏览、修改软件资源，包括菜单、对话框、字符串表等； 另外，还具备有 W32DASM 软件的反编译能力和PEditor 软件的 PE 文件头编辑功能，可以更容易的分析源代码，修复损坏了的资源，可以处理 PE 格式的文件如：EXE、DLL、DRV、BPL、DPL、SYS、CPL、OCX、SCR 等 32 位可执行程序。-Extremely powerful integrated visual localization tool that can directly view, modify the software resources, including menus, dialog boxes, string tables, etc. In addition, it also has a W32DASM decompile the software capabilities and software of the PE file header PEditor editing can more easily analyze the source code, repair damaged resources, can handle the PE file format, such as: EXE, DLL, DRV, BPL, DPL, SYS, CPL, OCX, SCR and other 32-bit executable.
Platform: |
Size: 498688 |
Author: 梁生 |
Hits:
Description: 一个析分PE文件的小程序的源代码(不含程序)，VC下编译，可用于查看PE文件头的信息。-A sub-analysis of PE files applet source code (excluding procedures), VC compiled, can be used to view PE file header information.
Platform: |
Size: 5120 |
Author: 王福 |
Hits:
Description: Peinfo 例子的 PE文件处理模块
显示 PE 文件头中的一些信息-Peinfo example PE PE file header processing module displays some of the information in the
Platform: |
Size: 9216 |
Author: 邓晴 |
Hits:
Description: 可执行文件头的变形技术，通过对文件pe头部的修改和变形，隐藏病毒的信息，是pe病毒的常用手段-The deformation of the executable file header technology, through the head of the file changes and deformation pe, hidden virus information, is a common means of virus pe
Platform: |
Size: 1839104 |
Author: Lk |
Hits:
Description: PE文件头结构 PE文件头结构-PE file header structure
Platform: |
Size: 1880064 |
Author: 姚某某 |
Hits:
Description: 简单PE结构解析工具.程序还不完善，也不是很好。主要是拿来和大家分享一下，供像我一样入门的朋友交流学习。
程序实现了IMAGE_DOS_HEADER、IMAGE_NT_HEADERS的解析，另外还有节表头、输入表、输出表的解析，时间标志信息的转换，RVA和文件便宜的转换，还有一个进程列表的显示。
注意，本程序没有编辑功能。
进程列表也仅仅是显示，而且是通过创建进程快照实现的，所以对于一些进程可能无法获取基址、镜像大小、以及模块列表-PE Structure of simple tools. Program is not perfect, nor is it good. Mainly used to share with you, for friends like me exchange study entry. Program for the IMAGE_DOS_HEADER, IMAGE_NT_HEADERS the analysis, in addition to the header section, the input table and output table analysis, time stamp information of the conversion, RVA and document conversion cheap, and a list of processes displayed. Note that this program is not editing. List of processes is only shown, but also to achieve by creating a snapshot of the process, so the process may not be able to get some base address, image size, and the list of modules
Platform: |
Size: 661504 |
Author: qiurun |
Hits:
Description: pe文件各种结构体image_file-header等-typedef struct _IMAGE_DOS_HEADER { // DOS .EXE header
WORD e_magic // Magic number
WORD e_cblp // Bytes on last page of file
WORD e_cp // Pages in file
WORD e_crlc // Relocations
WORD e_cparhdr // Size of header in paragraphs
WORD e_minalloc // Minimum extra paragraphs needed
WORD e_maxalloc // Maximum extra paragraphs needed
WORD e_ss // Initial (relative) SS value
WORD e_sp // Initial SP value
WORD e_csum // Checksum
WORD e_ip // Initial IP value
WORD e_cs // Initial (relative) CS value
WORD e_lfarlc // File address of relocation table
WORD e_ovno // Overlay number
WORD e_res[4
Platform: |
Size: 4096 |
Author: tianguo |
Hits:
Description: 本书主要讨论可执行文件头即PE文件头的变形技术，在正常情况下，可执行文件的第一部分给出了该文件的运行和加载信息-This book focuses on the executable file header that deformation in the PE file header, under normal circumstances, the file is given in the first part of the executable file to run and load information
Platform: |
Size: 1839104 |
Author: 好西 |
Hits:
Description: PE格式文件只要不修改文件头和文件中间的内容，只是在文件末尾添加数据，那么这个PE文件可以正常执行。本程序可将多个文件打为zip包，然后添加在exe程序结尾，再加上zip包长度和PACKAGE标志，程序运行可显示exe中添加的文件。-PE format files as long as it does not modify the contents of the file header and file middle, just to add data to the end of the file, then the PE file can be run properly.
This software can be playing multiple files as a zip package, and then add at the end of the exe program, plus the the zip packet length and PACKAGE flag, the program runs to display the files in the exe.
Platform: |
Size: 230400 |
Author: xlc |
Hits:
Description: 根据PE文件头，获取是32位还是64位程序。-According to the PE file header, get the 32-bit or 64-bit programs.
Platform: |
Size: 21504 |
Author: 莫冬 |
Hits:
Description: pe文件 mz头 恢复-pe file header recovery mz
Platform: |
Size: 727040 |
Author: YQBoy |
Hits:
Description: pe文件信息的编辑与查看，针对于pe文件头信息的显示与获取。-pe file editing and viewing information for and get in pe file header information is displayed.
Platform: |
Size: 19456 |
Author: haha909 |
Hits:
Description: PE文件解析，读取pe文件头、数据目录表、块表-PE file parsing, read the PE file header, data table of contents and block
Platform: |
Size: 4096 |
Author: 关少华 |
Hits:
Description: Information about the PE format header
Platform: |
Size: 9216 |
Author: cfbz_alias |
Hits: