Location:
Search - PE
Search list
Description: Windows NT 3.1引入了一种名为PE文件格式的新可执行文件格式。PE文件格式的规范包含在了MSDN的CD中（Specs and Strategy, Specifications, Windows NT File Format Specifications），但是它非常之晦涩。本程序实现了对PE文件的修改.-Windows NT 3.1 introduces a file format called PE a new executable file format. PE file format specification is included in the MSDN the CD in (Specs and Strategy, Specifications, Windows NT File Format Specifications), but it is very obscure. Realize this process of PE file changes.
Platform: |
Size: 47104 |
Author: 杨秉岐 |
Hits:
Description: 一般的为PE文件新增一个节的代码都是汇编代码,但是这是一个VC写的为PE文件新增一个节的代码,代码注释详尽!-General for the PE file add a section of the code are compiled code, but this is a VC for the PE file written in a new section of the code, the code detailed notes!
Platform: |
Size: 3016704 |
Author: 郭事业 |
Hits:
Description: 文件加壳器，通过解析PE文件格式，将原有exe文件运行前添加一个提示消息框，常用于演示版程序-加壳documents, and through the analytic PE file format, the original exe file to run before the prompts to add a message box, commonly used in the demo program
Platform: |
Size: 33792 |
Author: 高宏亮 |
Hits:
Description: PE文件头的查看工具,用于查看PE文件头-PE file header of the view the tool to view PE file header
Platform: |
Size: 135168 |
Author: 父亲 |
Hits:
Description: 一个PE文件编辑工具,可以编辑PE信息和区段,输入表查看,内存地址和文件地址换,还可以查看进程和Dump进程.是一个比较综合的工具.-PE stamp text instance, met with startled件Tools, you can meet信startled PE Core messaging 区 kill, HUAI 入 barrels查vessels, twitter Rui Jian-hua Address address text件away, Morrison查you can ship most vehicles Core Dump most vehicles. Did instance, gave birth to war chariot magnetic lift stamp cavity Tools.
Platform: |
Size: 50176 |
Author: 向东 |
Hits:
Description: 列举系统进程,PE文件格式的显示
列举系统进程,PE文件格式的显示-Listed systems process, PE file format display system, the process of enumeration, PE file format display
Platform: |
Size: 594944 |
Author: tmk |
Hits:
Description: 原理：对Pe文件的.data节，.text节进行XOR加密，然后将带解密的Loader写入文件头和第一个段的开头之间，修改Entry Point使其指向Loader.
测试用例：使用vc6.0自动生成的mfc对话框应用程序。
参考文献：(1)def源码
(2)黑客调试技术揭秘
(3)yoda s protector源码-Principle: The Pe documents. Data section,. Text section to XOR encryption, and then will take declassified documents Loader write head and the first between the beginning of paragraph, modify Entry Point to point Loader. Test cases: the use of vc6. 0 automatically generated mfc dialog application. References: (1) def source (2) debug technology hackers Secret (3) yoda s protector source
Platform: |
Size: 457728 |
Author: 东南 |
Hits:
Description: 原理：对Pe文件的.data节，.text节进行XOR加密，然后将带解密的Loader写入文件头和第一个段的开头之间，修改Entry Point使其指向Loader.
测试用例：使用vc6.0自动生成的mfc对话框应用程序。
参考文献：(1)def源码
(2)黑客调试技术揭秘
(3)yoda s protector源码-Principle: The Pe documents. Data section,. Text section to XOR encryption, and then will take declassified documents Loader write head and the first between the beginning of paragraph, modify Entry Point to point Loader. Test cases: the use of vc6. 0 automatically generated mfc dialog application. References: (1) def source (2) debug technology hackers Secret (3) yoda s protector source
Platform: |
Size: 456704 |
Author: 东南 |
Hits:
Description: Delphi写的PE查看器，附全部源码！希望对大家有用。-Delphi wrote PE Viewer, with full source code! Hope useful for everyone.
Platform: |
Size: 698368 |
Author: zhangxian |
Hits:
Description: 这个例子主要是介绍pe相关知识的
有了它,pe对于你来说是小菜一碟了-This example is mainly related knowledge pe Introduction With it, pe for you is a piece of cake
Platform: |
Size: 4353024 |
Author: 谢黎鹏 |
Hits:
Description: PEEncrypt PE加密程序Delphi源代码，能保护你的PE文件-PEEncrypt PE encryption Delphi source code, to protect your PE file
Platform: |
Size: 402432 |
Author: 吴铭 |
Hits:
Description: 此代码在程序运行的时候动态更改自己在任务管理器中显示的文件名.
代码中实现了将自身文件数据通过内存映射将自己保存在内存当中,..
方便直接在内存执行程序,而不需要在硬盘保存有实际的文件名,实现
最近比较流行的无硬盘文件的病毒功能(目前在内存当中执行PE文件的
功能暂未实现,有兴趣的朋友可以参考<<加密解密技术>>一书),
本程序还实现了挂接系统关机 注销 重启..等事件,当发生以上事件,程序会
自动还原原本的程序名字...具体细节不多说了,大家还是看代码吧 -This code is running in the process of dynamic change in the Task Manager to display the file name. Realize the code itself through memory-mapped file data stored in its memory, the .. convenient and direct the implementation of procedures in memory without the need preserved in the hard disk has the actual file name, realize more popular in recent documents of virus-free hard drive function (which is currently in memory implementation of PE files yet realize, interested can refer to Friend
Platform: |
Size: 2048 |
Author: 田浩 |
Hits:
Description: 演示如何修改PE文件，在运行的时候先弹出一个提示框-Demonstration of how to modify the PE file, when running the first pop up a prompt box
Platform: |
Size: 12288 |
Author: Daniel |
Hits:
Description: 汇编语言全接触，里面是汇编的win32汇编教程、odbc教程、vxd教程、pe教程等。-Keys assembly language, which is compiled win32 compilation of tutorials, odbc tutorial, vxd tutorials, pe, etc. tutorials.
Platform: |
Size: 841728 |
Author: wei zhang |
Hits:
Description: 详细介绍WINDOWS PE文件格式，对PE格式有所兴趣的读者均可阅读-Details WINDOWS PE file format, on the PE format interested readers can read
Platform: |
Size: 712704 |
Author: haoyu |
Hits:
Description: 编译环境VC+6.0，压缩包中包含1）用来修改头部的EXE文件2）测试程序。有助于让我们了解病毒是如何感染PE文件-Compiler environment VC+ 6.0, compressed package that contains one) is used to modify the head of the EXE file 2) test procedures. Help us to understand how the virus is infected PE files
Platform: |
Size: 96256 |
Author: 王冠 |
Hits:
Description: 查询PE文件结构-PE file structure query
Platform: |
Size: 35840 |
Author: |
Hits:
Description: PE文件操作-PE file operations
Platform: |
Size: 197632 |
Author: |
Hits:
Description: PE引入表修改-The introduction of modified PE sheet
Platform: |
Size: 133120 |
Author: |
Hits:
Description: 原理：对Pe文件的.data节，.text节进行XOR加密，然后将带解密的Loader写入文件头和第一个段的开头之间，修改Entry Point使其指向Loader.
测试用例：使用vc6.0自动生成的mfc对话框应用程序。-Principle: The Pe documents. Data section,. Text section to XOR encryption, and then will take declassified documents Loader write head and the first between the beginning of paragraph, modify Entry Point to point Loader. Test cases: the use of vc6. 0 automatically generated mfc dialog application.
Platform: |
Size: 45056 |
Author: 黑色心情 |
Hits:
«
1
2
...
5
6
7
8
9
1011
12
13
14
15
...
50
»