Location:
Search - PEDump
Search list
Description: 把exe里面的资源通通取出来,实现反编译
Platform: |
Size: 34773 |
Author: 1oveyy |
Hits:
Description: PE文件分析结构，
Platform: |
Size: 147051 |
Author: qsn |
Hits:
Description: 知道大家有没有用过PEDUMP，一个很好用的PE文件分析软件，不过那个软件是在DOS的命令行程序，并且是英文的，由于编EXE文件加密器的时候很想用一个这样的程序帮助分析，于是研究了PE文件的结构，做出了现在这个PE文件分析器，提供给那些想快些了解PE结构或者编制这方面的程序的朋友一个工具。
我正在加强其功能，主要是用在反编译方面太弱了，希望得到高手的帮助。
新版本的1.53版加强了文件导出功能，可以和M$的PUDUMP分析结果媲美：）
1.91版，最大的改动就是增加了资源分析显示部分，用法察看自带的ReadMe.txt，可以用来改资源了。
1.92版改进一点点小问题，增加毕业论文。
Platform: |
Size: 645041 |
Author: 蓝海 |
Hits:
Description: Windows PE文件格式分析与PEDUMP的实现-Windows PE File Format Analysis and realization of PEDUMP
Platform: |
Size: 1012736 |
Author: zhangyi |
Hits:
Description: 1不是原创
2可以对文件进行pe结构的解析
3可以对取得的内容进行保存-two originality is not a document can be pe analytic structure of the three can be made to the content preservation
Platform: |
Size: 645120 |
Author: 素宾 |
Hits:
Description: 这是一个可以察看PE文件头的小工具，现在是２．０版，还有待改进。-This is a look at PE file a small tool, it is now version 2.0, could be improved.
Platform: |
Size: 541696 |
Author: 黄鑫 |
Hits:
Description: 这是使我最受益的学习PE文件的代码。让我终生受益！-This is my greatest benefit of learning PE document code. Allow me to enjoy the benefits!
Platform: |
Size: 129024 |
Author: 王明心 |
Hits:
Description: 把exe里面的资源通通取出来,实现反编译-Exe inside to check out all the resources, realize decompile
Platform: |
Size: 34816 |
Author: 1oveyy |
Hits:
Description: PE文件分析结构，-Analysis of PE file structure,
Platform: |
Size: 146432 |
Author: qsn |
Hits:
Description: 知道大家有没有用过PEDUMP，一个很好用的PE文件分析软件，不过那个软件是在DOS的命令行程序，并且是英文的，由于编EXE文件加密器的时候很想用一个这样的程序帮助分析，于是研究了PE文件的结构，做出了现在这个PE文件分析器，提供给那些想快些了解PE结构或者编制这方面的程序的朋友一个工具。
我正在加强其功能，主要是用在反编译方面太弱了，希望得到高手的帮助。
新版本的1.53版加强了文件导出功能，可以和M$的PUDUMP分析结果媲美：）
1.91版，最大的改动就是增加了资源分析显示部分，用法察看自带的ReadMe.txt，可以用来改资源了。
1.92版改进一点点小问题，增加毕业论文。 -err
Platform: |
Size: 645120 |
Author: 蓝海 |
Hits:
Description: Delphi下深入Windows核心编程,PE结构分析-Delphi depth under the Windows core programming, PE Structural Analysis
Platform: |
Size: 146432 |
Author: |
Hits:
Description: 分析pe文件的原程序,INTERNET搜集的原码,可以自己修改成一个PE分析工具-Analysis of the original document pe procedures, INTERNET collect the original code, you can make amendments on her own as an analytical tool PE
Platform: |
Size: 603136 |
Author: jack |
Hits:
Description: A simple PEDUMPER written in wxWidgets framework!
Platform: |
Size: 1114112 |
Author: cyberwarrior |
Hits:
Description: PEDUMP程序自从1994年的版本以来，已经有了明显的改善。它可以显示在PE里的每一个数据类型，包括：
IMAGE_NT_HEADERS
输入/输出表
资源
基址重定位
debug目录
延迟装入输入表
绑定输入描述符
IA-64异常处理表
TLS初始化数据
.NET运行时头部
除了可导出PE可执行文件外，PEDUMP也能导出COFF格式的OBJ文件、COFF输入库（新的和旧的格式）、COFF符号表和DBG文件。
PEDUMP是一个命令行程序，不带任何选项对我刚刚描述的文件类型去运行，将会有一个包括许多有用数据结构的缺省导出。几个可以有额外输出的选项列在如下：
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
/A dump里包括所有的内容
/B 显示基址重地位
/H 包括区段的16进制形式dump
/I 包括输入地址表thunk地址
/L 包括行号信息
/P 包括PDATA（运行时函数）
/R 包括详细的资源（字符串表和对话框）
/S 显示符号表 -dfdfdfdghhjjiww dkfd f skf df dfk skfdf k skf df
Platform: |
Size: 64512 |
Author: 王一 |
Hits:
Description: A source code for PE files header extraction
Platform: |
Size: 64512 |
Author: sag |
Hits:
Description: pecoff信息察看程序， 可以用来察看dll, exe, sys等属于pecoff格式的节/入口/时间/版权等信息
Platform: |
Size: 122880 |
Author: jiang |
Hits:
Description: This my PEDUMP code as January 1998. It s certainly better than the original
PEDUMP from my MSJ column, and from my "Windows 95 System Programming Secrets"
book. There are additions for several new file types, and additional resources.
Having said that, this is by no means the best PEDUMP sources I have. I ve made
extensive additions since then for things like PE32+ (Win64) support. I plan to
release them publicly as part of future article in MSDN magazine. This article
will essentially be an update of my 1994 article on the PE format. There have
been many exciting changes since then, and I ll cover them, as well as correct
some errors in the original.
In the meanwhile, enjoy this code. I know there are some bugs in a few places.
(Yes, I know that there is a new .LIB file format, for instance.) These issues
are most likely fixed in the version I have locally. Comments are welcome,
but I don t expect to actively work on this branch of my PEDUMP code.-This is my PEDUMP code as January 1998. It' s certainly better than the original PEDUMP from my MSJ column, and from my " Windows 95 System Programming Secrets" book. There are additions for several new file types, and additional resources. Having said that, this is by no means the best PEDUMP sources I have. I' ve made extensive additions since then for things like PE32+ (Win64) support. I plan to release them publicly as part of future article in MSDN magazine. This article will essentially be an update of my 1994 article on the PE format. There have been many exciting changes since then, and I' ll cover them, as well as correct some errors in the original. In the meanwhile, enjoy this code. I know there are some bugs in a few places. (Yes, I know that there is a new. LIB file format, for instance.) These issues are most likely fixed in the version I have locally. Comments are welcome, but I don' t expect to actively work on this branch of my PEDUMP code.
Platform: |
Size: 25600 |
Author: Danny |
Hits:
Description: PEDump Delphi编程实现文件分析器经典代码-PEDump Delphi programming file parser classic code
Platform: |
Size: 271360 |
Author: 李锐 |
Hits:
Description: x86 disassembler
main.c
pedump.c
print.c
debug.c
decoder.c-x86 disassembler
Platform: |
Size: 145408 |
Author: li ling |
Hits:
Description: PE文件字节码查看器，写的比较详细，注释的比较全面，新手适合好好钻研，老鸟路过-PE file byte code viewer, written in more detail, a more comprehensive annotated novice for a good study, veterans passing
Platform: |
Size: 47104 |
Author: 中华 |
Hits: