Location:
Search - pe file
Search list
Description: pe文件格式.vc.net
BOOL CpefileDlg::IsPEFile(LPVOID ImageBase)
{
PIMAGE_DOS_HEADER pDH=NULL
PIMAGE_NT_HEADERS pNtH=NULL
if(!ImageBase)
return FALSE
pDH=(PIMAGE_DOS_HEADER)ImageBase
if(pDH->e_magic!=IMAGE_DOS_SIGNATURE)
return FALSE
pNtH=(PIMAGE_NT_HEADERS32)((DWORD)pDH+pDH->e_lfanew)
if (pNtH->Signature != IMAGE_NT_SIGNATURE )
return FALSE
return TRUE
}-pe file formats. Vc.net BOOL CpefileDlg : : IsPEFile (LPVOID ImageBase) (PIMAGE_DOS_HEADER bacteria PIMAGE_NT_HEADERS pNtH = NULL = NULL if (! ImageBase) return FALSE mapping = (PIMAGE_DOS_HEADER) ImageBase if (Endo-gt; e_magic! = IMAGE_DOS_SIGNATURE) return FALSE pNtH = (PIMAGE_NT_HEADERS32) ((DWORD) recombinant plasmid-gt; e_lfanew) if (pNtH - gt; Signature! = IMAGE_NT_SIGNATURE) return FALSE return TRUE)
Platform: |
Size: 77526 |
Author: rar |
Hits:
Description: 这篇文章是有关在OS Windows下挂钩API函数的方法。所有例子都在基于NT技术的Windows版本NT 4.0及以上有效(Windows NT 4.0, Windows 2000, Windows XP)。可能在其它Windows系统也会有效。
你应该比较熟悉Windows下的进程、汇编器、PE文件结构和一些API函数，才能明白这篇文章里的内容。
这里使用\"Hooking API\"这个术语表示对API的完全修改。当调用被挂钩的API时，我们的代码能立刻被执行。我将写下完全的挂钩过程。
-This article is concerned with the OS Windows API function linked to the method. All the examples are based on the NT version of Windows NT 4.0 and above effective (Windows NT 4.0, Windows 2000, Windows XP). In other Windows system will effectively. You may be familiar with the process under Windows, assembler, PE file structure and some API function, in order to understand this article's content. Here the use of "56.6 API," said the term of the complete API changes. When the call was linked to the API, the code can be executed immediately. I will write entirely linked to the process.
Platform: |
Size: 19127 |
Author: inwing |
Hits:
Description: PE文件格式学习
由于 Win32 的降临，微软对于 OBJ 和 EXE （DLL ）格式做了全盘的改变。这些改变
建立在其它操作系统上的既成结果，使微软得以节省时间。改头换面的主要目的是为了
强化在不同平台之间的可移植性。COFF OBJ 格式在 Win32 诞生之前就存在了。PE 格
式则是 COFF 格式的延伸，使用于 Win32 平台上。
-PE file format of the study come as Win32, Microsoft OBJ and EXE (DLL) format so the overall change. These changes based on other operating systems on the results accomplished so Microsoft can save time. Giving the main purpose is to enhance the different platforms between portability. COFF OBJ format prior to the birth of the Win32 existence. PE format is an extension of COFF format, for use in Win32 platform.
Platform: |
Size: 219891 |
Author: sunpeng |
Hits:
Description: PE文件格式分析程序。在分析程序的过程中，经常需要查看PE文件的一些信息，包括文件头、块表、版本或资源等，本章将研究如何通过编程的方法实现这些功能-PE file format analytical procedures. The analysis of the course of the proceedings, often need to see the documents PE some information, including documents first, block table, version or resources, this chapter will examine how the programming method of achieving these functions
Platform: |
Size: 4986 |
Author: 李军 |
Hits:
Description: 对PE文件格式分析的一个程序源代码，对学习PE文件格式很有帮助。-PE file format for analysis of a program's source code, to learn PE file format helpful.
Platform: |
Size: 35437 |
Author: liming |
Hits:
Description: pe文件格式查看源代码 pe文件格式查看源代码-pe file format to view source code files pe View the source code files pe View source code
Platform: |
Size: 171397 |
Author: spacecup |
Hits:
Description: 汇编加密文件一例。-compilation of case file encryption.
Platform: |
Size: 28843 |
Author: 蝰蛇 |
Hits:
Description: Debug.x：封装SEH 作用：在程序发生未处理的异常时，利用SEH获得异常时刻的信息，并将信息显示或存储到文件。 相关：pe文件操作 Stack操作-Debug.x : Packaging, but SEH role : the procedural anomalies occurred untreated, but SEH use was unusual moment of the information and information display or storage of the document. Related : pe file manipulation operations Stack
Platform: |
Size: 4473 |
Author: 回忆录 |
Hits:
Description: PE 相关代码,研究PE文件加密及加壳脱壳的事例代码。-PE code, research PE file encryption and shell sabot code examples.
Platform: |
Size: 46329 |
Author: zj |
Hits:
Description: PE文件格式分析程序VC++PE文件格式分析程序VC-PE file format analytical procedures VC PE file format analytical procedures VC
Platform: |
Size: 5125 |
Author: 法激 |
Hits:
Description: pe文件格式分析，用于程序分析，破解等用途-pe file format, procedures for the analysis, such as the use of crack
Platform: |
Size: 103788 |
Author: lihua2008 |
Hits:
Description: 一个查看PE文件头和数据的工具，用VC6编译执行-a PE file and data tools, compiler implementation using VC6
Platform: |
Size: 47432 |
Author: 陈厅 |
Hits:
Description: 一个PE文件分析器，可分析Win32文件格式，列出导入导出表和程序的其它信息-a PE File Analyzer, analysis Win32 file format, Import and Export of listed tables and other information procedures
Platform: |
Size: 19351 |
Author: 江洪洪 |
Hits:
Description: OEP是每个PE文件读取时的起始地址，该程序给出两种方法来读取OEP，一种是直接从PE文件读取；另一种是将PE映射到内存中来读取。-OEP each PE file read at the opening address, the program gives two ways to read OEP. A PE is directly from the document read. Another is to PE Maps memory to read.
Platform: |
Size: 32894 |
Author: byron |
Hits:
Description: 该程序改写PE文件头，插入一段代码，使PE文件运行时先启动我们的代码，此例中以系统自带的计数器为要改写的PE文件。-the program rewritten PE file, insert a code to enable PE document first started running our code, such cases were to bring their own system for the counter to rewrite the document PE.
Platform: |
Size: 29463 |
Author: byron |
Hits:
Description: windows pe文件格式说明-windows pe File Formats
Platform: |
Size: 31737 |
Author: 陶正 |
Hits:
Description: 专门介绍WINDOWS的PE文件格-devoted to the Windows PE file grid
Platform: |
Size: 219813 |
Author: 泽寒 |
Hits:
Description: Well, i started coding PE things to test my knowledge sometime ago..and almost without noticing my things started to grow in size and functionality. Basically this program will inform you about what i consider to be the most important pieces of information about a given PE file.
PE scanner,analizer,call it whatever.
Maybe the most usefull feature is the one concerning the import table.
Ok enough! go and try it! but first read on..
Platform: |
Size: 43905 |
Author: Calio |
Hits:
Description: PE教程1: PE文件格式一览
PE教程2: 检验PE文件的有效性
PE教程3: File Header （文件头）
PE教程4: Optional Header
PE教程5: Section Table（节表）
PE教程6: Import Table（引入表）
PE教程7: Export Table（引出表）
Platform: |
Size: 196085 |
Author: nogood2 |
Hits:
Description: PE文件信息查看编辑工具，VC源码-View PE file information editing tools, VC FOSS
Platform: |
Size: 49450 |
Author: waterwhu |
Hits:
«
1
2
...
5
6
7
8
9
1011
12
13
14
15
...
31
»