Location:
Search - PE
Search list
Description: 《加密与解密》随书光盘(三)工具
本书在第一版的基础上,更新了第一版中的过时内容。
本书共分三个部分。
第一部分介绍与加密和解密技术相关的基础知识。
第二部分全面讲述各种最新的软件加密与解密技术及方法，如静态分析技术，动态分析技术，序列号，警告窗口，时间限制，加密算法MD5、SHA、RSA、ElGanal等。
第三部分主要介绍PE文件的知识，如增加文件功能、加壳与脱壳、补丁技术等。-"Encryption and decryption" CD with the book (3) tools in the first edition of the book, on the basis of the update of the first edition of outdated content. The book is divided into three parts. The first part gives with the encryption and decryption technology-related knowledge. The second part of a comprehensive picture of all the latest software encryption and decryption technology and methods, such as static analysis, dynamic analysis, serial number, a warning window of time constraints, encryption algorithm MD5, SHA, RSA, ElGanal so. The third part introduces the knowledge PE documents, such as increased document functions, shell and sabot, patch technology.
Platform: |
Size: 11179008 |
Author: 张淼 |
Hits:
Description: 《加密与解密》随书光盘(四)工具
本书在第一版的基础上,更新了第一版中的过时内容。
本书共分三个部分。
第一部分介绍与加密和解密技术相关的基础知识。
第二部分全面讲述各种最新的软件加密与解密技术及方法，如静态分析技术，动态分析技术，序列号，警告窗口，时间限制，加密算法MD5、SHA、RSA、ElGanal等。
第三部分主要介绍PE文件的知识，如增加文件功能、加壳与脱壳、补丁技术等。-"Encryption and decryption" CD with the book (4) tools in the first edition of the book, on the basis of the update of the first edition of outdated content. The book is divided into three parts. The first part gives with the encryption and decryption technology-related knowledge. The second part of a comprehensive picture of all the latest software encryption and decryption technology and methods, such as static analysis, dynamic analysis, serial number, a warning window of time constraints, encryption algorithm MD5, SHA, RSA, ElGanal so. The third part introduces the knowledge PE documents, such as increased document functions, shell and sabot, patch technology.
Platform: |
Size: 19382272 |
Author: 张淼 |
Hits:
Description: 《加密与解密》随书光盘(五)习题
本书在第一版的基础上,更新了第一版中的过时内容。
本书共分三个部分。
第一部分介绍与加密和解密技术相关的基础知识。
第二部分全面讲述各种最新的软件加密与解密技术及方法，如静态分析技术，动态分析技术，序列号，警告窗口，时间限制，加密算法MD5、SHA、RSA、ElGanal等。
第三部分主要介绍PE文件的知识，如增加文件功能、加壳与脱壳、补丁技术等。-"Encryption and decryption" CD with the book (5) Exercise of the first edition of the book, on the basis of the update of the first edition of outdated content. The book is divided into three parts. The first part gives with the encryption and decryption technology-related knowledge. The second part of a comprehensive picture of all the latest software encryption and decryption technology and methods, such as static analysis, dynamic analysis, serial number, a warning window of time constraints, encryption algorithm MD5, SHA, RSA, ElGanal so. The third part introduces the knowledge PE documents, such as increased document functions, shell and sabot, patch technology.
Platform: |
Size: 12234752 |
Author: 张淼 |
Hits:
Description: 1不是原创
2可以对文件进行pe结构的解析
3可以对取得的内容进行保存-two originality is not a document can be pe analytic structure of the three can be made to the content preservation
Platform: |
Size: 645120 |
Author: 素宾 |
Hits:
Description: 一个清除PE头垃圾来缩短PE文件大小的演示程序。很好的说明了PE结构中无用的部分。学PE结构的朋友可以-a PE first garbage removal to reduce the file size of PE Demonstration Program. A good reminder of PE structure of the part useless. PE structure of the school friends can s
Platform: |
Size: 4096 |
Author: |
Hits:
Description: 给指定程序增加区块,并且巧妙处理PE结构.学习PE结构的好代码.VC编译.-specified procedures to increase the block, and handled sensitively PE structure. To study the structure of PE good code. VC compiler.
Platform: |
Size: 25600 |
Author: 孟峰 |
Hits:
Description: PE结构分析的实现.VC完整代码,代码结构优良,VC6与VC.NET下编译成功.-PE structure analysis is achieved. VC integrity code, code structure fine, VC6 with VC.NET compiler success.
Platform: |
Size: 83968 |
Author: 孟峰 |
Hits:
Description: 这是一个真正的32位编译器源代码，能直接生成低级机器码和x86 PE可执行文件，能创建GUI或者CUI可执行文件和动态连接库程序，支持byte, word, dword, 单精度浮点数据类型，比较，For, While, Loop 等循环，支持API调用,支持标准常数、自定义数据等，界面漂亮。-This is a real 32-bit compiler source code, junior can directly generate binary and x86 PE executable files, to be able to create GUI or Encoder executable files and dynamic link library that supports byte, word, dword, single precision floating point data types, comparing For, While, Loop and other cycle, support API calls, the standard constant support, custom data, interface beautiful.
Platform: |
Size: 496640 |
Author: 追风少年 |
Hits:
Description: pe文件的读写与分析，写出EXE文件与DLL文件的各项参数如入口点等-pe document literacy and analysis, write EXE and DLL files documents of the various parameters such as entry points
Platform: |
Size: 51200 |
Author: 王海 |
Hits:
Description: pe文件格式.vc.net
BOOL CpefileDlg::IsPEFile(LPVOID ImageBase)
{
PIMAGE_DOS_HEADER pDH=NULL
PIMAGE_NT_HEADERS pNtH=NULL
if(!ImageBase)
return FALSE
pDH=(PIMAGE_DOS_HEADER)ImageBase
if(pDH->e_magic!=IMAGE_DOS_SIGNATURE)
return FALSE
pNtH=(PIMAGE_NT_HEADERS32)((DWORD)pDH+pDH->e_lfanew)
if (pNtH->Signature != IMAGE_NT_SIGNATURE )
return FALSE
return TRUE
}-pe file formats. Vc.net BOOL CpefileDlg : : IsPEFile (LPVOID ImageBase) (PIMAGE_DOS_HEADER bacteria PIMAGE_NT_HEADERS pNtH = NULL = NULL if (! ImageBase) return FALSE mapping = (PIMAGE_DOS_HEADER) ImageBase if (Endo-gt; e_magic! = IMAGE_DOS_SIGNATURE) return FALSE pNtH = (PIMAGE_NT_HEADERS32) ((DWORD) recombinant plasmid-gt; e_lfanew) if (pNtH- gt; Signature! = IMAGE_NT_SIGNATURE) return FALSE return TRUE)
Platform: |
Size: 76800 |
Author: rar |
Hits:
Description: 这篇文章是有关在OS Windows下挂钩API函数的方法。所有例子都在基于NT技术的Windows版本NT 4.0及以上有效(Windows NT 4.0, Windows 2000, Windows XP)。可能在其它Windows系统也会有效。
你应该比较熟悉Windows下的进程、汇编器、PE文件结构和一些API函数，才能明白这篇文章里的内容。
这里使用"Hooking API"这个术语表示对API的完全修改。当调用被挂钩的API时，我们的代码能立刻被执行。我将写下完全的挂钩过程。
-This article is concerned with the OS Windows API function linked to the method. All the examples are based on the NT version of Windows NT 4.0 and above effective (Windows NT 4.0, Windows 2000, Windows XP). In other Windows system will effectively. You may be familiar with the process under Windows, assembler, PE file structure and some API function, in order to understand this article's content. Here the use of "56.6 API," said the term of the complete API changes. When the call was linked to the API, the code can be executed immediately. I will write entirely linked to the process.
Platform: |
Size: 18432 |
Author: inwing |
Hits:
Description: PE文件格式学习
由于 Win32 的降临，微软对于 OBJ 和 EXE （DLL ）格式做了全盘的改变。这些改变
建立在其它操作系统上的既成结果，使微软得以节省时间。改头换面的主要目的是为了
强化在不同平台之间的可移植性。COFF OBJ 格式在 Win32 诞生之前就存在了。PE 格
式则是 COFF 格式的延伸，使用于 Win32 平台上。
-PE file format of the study come as Win32, Microsoft OBJ and EXE (DLL) format so the overall change. These changes based on other operating systems on the results accomplished so Microsoft can save time. Giving the main purpose is to enhance the different platforms between portability. COFF OBJ format prior to the birth of the Win32 existence. PE format is an extension of COFF format, for use in Win32 platform.
Platform: |
Size: 219136 |
Author: sunpeng |
Hits:
Description: PE文件格式分析程序。在分析程序的过程中，经常需要查看PE文件的一些信息，包括文件头、块表、版本或资源等，本章将研究如何通过编程的方法实现这些功能-PE file format analytical procedures. The analysis of the course of the proceedings, often need to see the documents PE some information, including documents first, block table, version or resources, this chapter will examine how the programming method of achieving these functions
Platform: |
Size: 5120 |
Author: 李军 |
Hits:
Description: 对PE文件格式分析的一个程序源代码，对学习PE文件格式很有帮助。-PE file format for analysis of a program's source code, to learn PE file format helpful.
Platform: |
Size: 34816 |
Author: liming |
Hits:
Description: pe文件格式查看源代码 pe文件格式查看源代码-pe file format to view source code files pe View the source code files pe View source code
Platform: |
Size: 171008 |
Author: spacecup |
Hits:
Description: 这是一个Windows Console程序，可以PE文件中所有的资源一次性通通取出来，存放在以文件名命名的目录中，支持用通配符指定多个文件，并且，可以指定/s参数以搜索子目录。
This program enumerates and extracts resources in DLLs or EXEs,etc.
Syntax: EnumRes [/[e][s]] [filename ...]
/e To extract resources.
/s To search subdirectories.
/es To extract resources in including subdirectories.
Examples:
EnumRes C:\Windows\Explorer.exe
EnumRes /e C:\Windows\Explorer.exe
EnumRes /e C:\Windows\*.exe C:\Windows\*.dll
EnumRes /es C:\Windows\*.*-This a Windows Console procedures, PE can document all the one-time resources taken out none, in the document stored in the directory names, support the use of wildcards designated multiple files, and can specify/s parameter to search subdirectories. This program extracts resource and enumerates s in DLLs or EXEs, etc.. Syntax : EnumRes [/ [e] [s] ...] [filename]/e To extract resources./s To search subdirectories./es To including extract resources in subdirectorie s. Examples : EnumRes C : \ Windows \ Startup EnumRes/e C : \ Windows \ Startup EnumRes/e C : \ Windows \*. exe C : \ Windows \*. dll EnumRes/es C : \ Windows \*.*
Platform: |
Size: 4096 |
Author: 林宇 |
Hits:
Description: PE 相关代码,研究PE文件加密及加壳脱壳的事例代码。-PE code, research PE file encryption and shell sabot code examples.
Platform: |
Size: 46080 |
Author: zj |
Hits:
Description: PE文件格式分析程序VC++PE文件格式分析程序VC-PE file format analytical procedures VC PE file format analytical procedures VC
Platform: |
Size: 5120 |
Author: 法激 |
Hits:
Description: 一份PE文件修改的VC源码，可查看PE文件的大量信息和修改部分文件信息，可查看进程加载的模块。-a PE files VC source, PE document can be found on the vast amount of information and documents to amend some information can be found on the module loading process.
Platform: |
Size: 51200 |
Author: 吴志明 |
Hits:
Description: 这是脱壳 PE-ARMOR 的程序源代码汇编的-PE-ARMOR the source code compilation
Platform: |
Size: 176128 |
Author: 伙同 |
Hits: