Location:
Search - pe file
Search list
Description: Windows PE文件格式分析与PEDUMP的实现-Windows PE File Format Analysis and realization of PEDUMP
Platform: |
Size: 1012736 |
Author: zhangyi |
Hits:
Description: PE文件分析例子-Examples of PE File Analysis
Platform: |
Size: 94208 |
Author: weihuiqian |
Hits:
Description: PE可执行文件的镶入式程序的编写方法及示例(镶入式后门程序&原程序) 由于Microsoft公司的Windows系统是当前大部分个人电脑所使用的操作系统 主要包括win95,98,me,nt4,2000,xp等，而这些系统所使用的可执行文件的格式基 本上是PE结构的。这里的可执行文件的镶入式程序就是针对PE结构的可执行文件。 这里先简单说一下PE文件框架结构： DOS MZ header DOS stub//在不支持 PE文件格式的操作系统中它将简单显示一个错误提示 PE header//含了许多PE装载器用到的重要信息 Section table//每个Section的信息 Section 1 Section 2 Section 3.... 由于SectionAlignment 块对齐的原因每个Section之间都会产生很多空间， 镶入式程序的代码可以放在Section之间的空位上，比较方便的方法是把代码放在 最后一个Section的末尾，然后更改Misc.VirtualSize和SizeOfRawData这两个位 于Section table的IMAGE_SECTION_HEADER结构数组的成员。如果代码十分的长， 有时候会造成镶入的代码无法被完全加载而产生错误，这时需要更改SizeOfImage 在IMAGE_NT_HEADERS 结构中。 在不同的WINDOWS版本中api调用地址也有不同，为了解决这个问题可以更改引 入表让加载器-PE executable files embedded into the formal process of the preparation methods and examples (Insert-in procedures for the back door
Platform: |
Size: 78848 |
Author: |
Hits:
Description: 汇编加密文件一例。-compilation of case file encryption.
Platform: |
Size: 28672 |
Author: 蝰蛇 |
Hits:
Description: windows pe文件格式说明-windows pe File Formats
Platform: |
Size: 31744 |
Author: 陶正 |
Hits:
Description: 专门介绍WINDOWS的PE文件格-devoted to the Windows PE file grid
Platform: |
Size: 219136 |
Author: 泽寒 |
Hits:
Description: PE文件信息查看编辑工具，VC源码-View PE file information editing tools, VC FOSS
Platform: |
Size: 49152 |
Author: waterwhu |
Hits:
Description: ProtoableEeec檔案格式-ProtoableEeec file format
Platform: |
Size: 442368 |
Author: 林敬宇 |
Hits:
Description: PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。-PE document windows (9598NT) of the executable file format. Popular CIH virus is through changes in PE content of the document, and to maintain the size of the same document, thus achieving its own functions. The procedures by analyzing PE file format, the executable files repositioning positioning table, prepared by the user at DLL, and then returned to normal indicators directive calling location. The DLL system by linking the background to achieve various levels of password function intercepted.
Platform: |
Size: 112640 |
Author: 王峰 |
Hits:
Description: 著名的开源链接器，可链接obj和lib文件，目标格式可以是MSDOS COM、MSDOS EXE或Win32 PE文件-a famous opened linker can link both obj and lib texts , in which destination format can be MSDOS ,COM ,MSDOS,EXE or Win32 PE file
Platform: |
Size: 187392 |
Author: lgw |
Hits:
Description: 这个小软件通过在可执行文件(.exe)的尾部添加一个新节（Section),并且修改PE的入口地址，使可执行文件在运行时，跳出一个输入密码的对话框，从而实现了简单的加密。-small software in executable files (. Exe) to the tail adding a new section (Section), and amend the PE import addresses, so that the executable file is run, jump out of a password dialog box, thus achieving a simple encryption.
Platform: |
Size: 405504 |
Author: 林哥哥 |
Hits:
Description: win32 pe 文件编程：编辑文件头.rar-programming documents : Edit the file. Rar
Platform: |
Size: 28672 |
Author: 激活帐号 |
Hits:
Description: 在exe文件引入表中挂接自定义的dll文件，可用于exe加密、制作插件等。。作者学习pe文件格式的成果，绝对原创！-exe files in the introduction of the table definition articulated since the dll file that can be used exe encryption, such as plug-in production. . Study author pe file formats the results absolute originality!
Platform: |
Size: 2048 |
Author: 倪玉龙 |
Hits:
Description: delphi语言，另有少量汇编代码，实现了PE文件的加密。-language, and another small amount of code compilation, achieved a PE file encryption.
Platform: |
Size: 214016 |
Author: npu |
Hits:
Description: pe文件格式.vc.net
BOOL CpefileDlg::IsPEFile(LPVOID ImageBase)
{
PIMAGE_DOS_HEADER pDH=NULL
PIMAGE_NT_HEADERS pNtH=NULL
if(!ImageBase)
return FALSE
pDH=(PIMAGE_DOS_HEADER)ImageBase
if(pDH->e_magic!=IMAGE_DOS_SIGNATURE)
return FALSE
pNtH=(PIMAGE_NT_HEADERS32)((DWORD)pDH+pDH->e_lfanew)
if (pNtH->Signature != IMAGE_NT_SIGNATURE )
return FALSE
return TRUE
}-pe file formats. Vc.net BOOL CpefileDlg : : IsPEFile (LPVOID ImageBase) (PIMAGE_DOS_HEADER bacteria PIMAGE_NT_HEADERS pNtH = NULL = NULL if (! ImageBase) return FALSE mapping = (PIMAGE_DOS_HEADER) ImageBase if (Endo-gt; e_magic! = IMAGE_DOS_SIGNATURE) return FALSE pNtH = (PIMAGE_NT_HEADERS32) ((DWORD) recombinant plasmid-gt; e_lfanew) if (pNtH- gt; Signature! = IMAGE_NT_SIGNATURE) return FALSE return TRUE)
Platform: |
Size: 76800 |
Author: rar |
Hits:
Description: PE文件格式分析程序。在分析程序的过程中，经常需要查看PE文件的一些信息，包括文件头、块表、版本或资源等，本章将研究如何通过编程的方法实现这些功能-PE file format analytical procedures. The analysis of the course of the proceedings, often need to see the documents PE some information, including documents first, block table, version or resources, this chapter will examine how the programming method of achieving these functions
Platform: |
Size: 5120 |
Author: 李军 |
Hits:
Description: 对PE文件格式分析的一个程序源代码，对学习PE文件格式很有帮助。-PE file format for analysis of a program's source code, to learn PE file format helpful.
Platform: |
Size: 34816 |
Author: liming |
Hits:
Description: PE文件格式分析程序VC++PE文件格式分析程序VC-PE file format analytical procedures VC PE file format analytical procedures VC
Platform: |
Size: 5120 |
Author: 法激 |
Hits:
Description: pe文件格式分析，用于程序分析，破解等用途-pe file format, procedures for the analysis, such as the use of crack
Platform: |
Size: 108544 |
Author: |
Hits:
Description: 一个查看PE文件头和数据的工具，用VC6编译执行-a PE file and data tools, compiler implementation using VC6
Platform: |
Size: 47104 |
Author: 陈厅 |
Hits:
«
1
2
3
45
6
7
8
9
10
...
31
»