Location:
Search - PE
Search list
Description: 主要功能：
本程序用来查看PE格式文件的剩余空间，并且可以添加新的节区。
语言：
MASM32
-main functions : View the procedures used for PE format of the remaining space, and can add a new section of the district. Language : between
Platform: |
Size: 11264 |
Author: vro0 |
Hits:
Description: 四川大学学士学位论文，关于Windows 95下的可执行文件的加密研究，有对PE格式文件感兴趣的朋友，一定不要错过这个资料-Sichuan University undergraduate thesis on Windows 95 executable file encryption, PE format of a document of interest to a friend, we should not miss this information
Platform: |
Size: 57344 |
Author: 梁海泉 |
Hits:
Description: 操作PE文件的一个类，对于理解PE文件的格式有帮助-operation of a document PE class for understanding the format of PE help
Platform: |
Size: 6144 |
Author: |
Hits:
Description: 本程序功能是分析PE文件结构，只作了最简单的分析。把输入表，输出表，还有各个段显示出来。参考了2个源码，写得很简单，是vc控制台程序，可以在这基础上扩展。我同时附上PE文件结构图，结合图片理解程序。只是时间仓促，注释写得少一点。-the functions of the program is to analyze PE structure of the document, only made the most simple analysis. Importation table, the output table, and all of the show. Reference to the two-source, write a very simple, yes vc console procedures, the basis of this expansion. I accompanied PE paper chart with photographs understanding procedures. Only hastily written notes less.
Platform: |
Size: 83968 |
Author: 林风 |
Hits:
Description: pe文件格式分析，用于程序分析，破解等用途-pe file format, procedures for the analysis, such as the use of crack
Platform: |
Size: 108544 |
Author: |
Hits:
Description: 检查内核模块是否被动态注入的程序。主要思想：PE文件的动静太比对。-check whether the kernel module dynamically injection procedures. The main idea : PE document is too static and dynamic than the right.
Platform: |
Size: 730112 |
Author: 于佳耕 |
Hits:
Description: 一个查看PE文件头和数据的工具，用VC6编译执行-a PE file and data tools, compiler implementation using VC6
Platform: |
Size: 47104 |
Author: 陈厅 |
Hits:
Description: 在《软件加密技术》这本书里看过PE文件各部分的详细解释之后，我也有了一个自己写PE文件分析器的的想法。虽然好的分析器不在少数，但对于一堆十六进制数，有些朋友可能不明白它代表什么意思。如果在程序里就可以将这些01序列转换成可以直接看懂得信息，那至少用户可以省去以后去查表的麻烦。怀着这样的想法，我仔细的研究了书中分析器PEInfo的源代码，我发现它没有提供信息转换的功能。
通过研究发现，PEInfo是通过PE文件在内存中的映象来获取文件信息的，我在想是否还有别的方法可以绕过将文件映象到内存这一步，直接读取文件信息。这样的方法只有直接读取磁盘上的PE文件，在磁盘上寻找所需要的文件信息。
在这里暂且不说这样的做法和内存映象法有什么优劣，我在此仅仅只是想找寻另一条解决问题的道路，并实现之。看完我的分析和源程序，大家自然知道孰优孰劣。-"software encryption technology," this book read PE part of the document detailed explanations, I have a paper to write his PE analyzer idea. Although good analyzer 2000, but a pile of hexadecimal number, some friends may not understand what it meant. If the program can be converted into 01 sequences can look directly understand information, That, at least users have no future to look-up table of trouble. With the idea, I carefully studied the book analyzer PEInfo of source code, I found that it did not provide data conversion functions. Found through research, through PE PEInfo document in memory mapping information to obtain documents, I wonder whether there are other ways to circumvent the document image to memory this step, direct read file information. This approach is only
Platform: |
Size: 110592 |
Author: heroin |
Hits:
Description: 一个PE文件分析器，可分析Win32文件格式，列出导入导出表和程序的其它信息-a PE File Analyzer, analysis Win32 file format, Import and Export of listed tables and other information procedures
Platform: |
Size: 19456 |
Author: |
Hits:
Description: 这是使我最受益的学习PE文件的代码。让我终生受益！-This is my greatest benefit of learning PE document code. Allow me to enjoy the benefits!
Platform: |
Size: 129024 |
Author: 王明心 |
Hits:
Description: PE资源分析器,能把PE文件的资源信息分析出来。最新1.3版可直接浏览pe文件的位图、图标、字符串、加速键、对话框等资源，并可方便地导出文件。king_koo原创-PE resources analyzer, and can document the PE resources information analyzed. The latest 1.3 version can be browsing pe documents bitmap, icon, string, accelerate key resources such as dialog, derived and easy to document. King_koo originality
Platform: |
Size: 32768 |
Author: 唐晓飞 |
Hits:
Description: 一些比较有价值的关于PE格式的资料,希望能对大家理解PE有帮助-some of the more valuable on the PE format, we hope to understand the PE help!
Platform: |
Size: 687104 |
Author: darren |
Hits:
Description: 本程序源码可以在 PE 文件的结尾增加一个新节，从而在已被“加密”的程序开始运行时，要求输入密码。
-the program source code in PE the end of the document, add a new section, so has been "encryption" of operational procedures, asked to enter the password.
Platform: |
Size: 19456 |
Author: wind |
Hits:
Description: OEP是每个PE文件读取时的起始地址，该程序给出两种方法来读取OEP，一种是直接从PE文件读取；另一种是将PE映射到内存中来读取。-OEP each PE file read at the opening address, the program gives two ways to read OEP. A PE is directly from the document read. Another is to PE Maps memory to read.
Platform: |
Size: 32768 |
Author: byron |
Hits:
Description: 该程序改写PE文件头，插入一段代码，使PE文件运行时先启动我们的代码，此例中以系统自带的计数器为要改写的PE文件。-the program rewritten PE file, insert a code to enable PE document first started running our code, such cases were to bring their own system for the counter to rewrite the document PE.
Platform: |
Size: 29696 |
Author: byron |
Hits:
Description: PE 文件分析程序,
VisualC++编写,
作毕业设计时的作品,
大家可以瞧瞧哦-PE document analysis procedures, VisualC prepared for graduation design works, we can windows oh
Platform: |
Size: 3758080 |
Author: 程程 |
Hits:
Description: 老罗写的监视pe文件的程序,采用Debug API的技术进行调试监视进程的API调用,了解软件的行为-old Luo wrote the document pe surveillance procedures, Debug API using the technology for the surveillance process debugging API calls, understanding the behavior of software
Platform: |
Size: 99328 |
Author: 康康 |
Hits:
Description: 一个小病毒 代码。没什么危害，入门级人的。。高手就不用看了。。可以感染DOS下的COM EXE文件。。不能感染PE文件-a small virus code. No harm, the entry-level person. . Master would not have to read. . DOS can be infected with the EXE COM documents. . PE documents can be infected
Platform: |
Size: 2048 |
Author: monst |
Hits:
Description: PE文件加壳信息的检测，可以检测出是哪个编译器编译和加壳。
Platform: |
Size: 66560 |
Author: 南亮亮 |
Hits:
Description: I think this the first time every one can look at a PE crypter source
in top level language such VC++.
So as I promised ... if some one sent me one nice compress source I would
publish my source.
I dedicate this source to all people who involve in this field.
I hope it helps someone.
Have good days
ashkbiz
Check: yodap.cjb.net
Platform: |
Size: 49152 |
Author: 李泉 |
Hits:
«
1
2
...
4
5
6
7
8
910
11
12
13
14
...
50
»