Location:
Search - pe read
Search list
Description: 这是一个代码,可以读取PE文件的文件头信息,非常实用.-This is a code that can read the documents in PE header, very practical.
Platform: |
Size: 18402 |
Author: 小刚 |
Hits:
Description: 在《软件加密技术》这本书里看过PE文件各部分的详细解释之后，我也有了一个自己写PE文件分析器的的想法。虽然好的分析器不在少数，但对于一堆十六进制数，有些朋友可能不明白它代表什么意思。如果在程序里就可以将这些01序列转换成可以直接看懂得信息，那至少用户可以省去以后去查表的麻烦。怀着这样的想法，我仔细的研究了书中分析器PEInfo的源代码，我发现它没有提供信息转换的功能。
通过研究发现，PEInfo是通过PE文件在内存中的映象来获取文件信息的，我在想是否还有别的方法可以绕过将文件映象到内存这一步，直接读取文件信息。这样的方法只有直接读取磁盘上的PE文件，在磁盘上寻找所需要的文件信息。
在这里暂且不说这样的做法和内存映象法有什么优劣，我在此仅仅只是想找寻另一条解决问题的道路，并实现之。看完我的分析和源程序，大家自然知道孰优孰劣。-"software encryption technology," this book read PE part of the document detailed explanations, I have a paper to write his PE analyzer idea. Although good analyzer 2000, but a pile of hexadecimal number, some friends may not understand what it meant. If the program can be converted into 01 sequences can look directly understand information, That, at least users have no future to look-up table of trouble. With the idea, I carefully studied the book analyzer PEInfo of source code, I found that it did not provide data conversion functions. Found through research, through PE PEInfo document in memory mapping information to obtain documents, I wonder whether there are other ways to circumvent the document image to memory this step, direct read file information. This approach is only
Platform: |
Size: 111036 |
Author: heroin |
Hits:
Description: OEP是每个PE文件读取时的起始地址，该程序给出两种方法来读取OEP，一种是直接从PE文件读取；另一种是将PE映射到内存中来读取。-OEP each PE file read at the opening address, the program gives two ways to read OEP. A PE is directly from the document read. Another is to PE Maps memory to read.
Platform: |
Size: 32894 |
Author: byron |
Hits:
Description: PE 文件格式读取-read and save by PE document
Platform: |
Size: 3028 |
Author: 山于 |
Hits:
Description: PE文件读写分析的C++类，并含有9个例子。-PE analysis of documents to read and write C++ Category, and contains nine examples.
Platform: |
Size: 84992 |
Author: 站长 |
Hits:
Description: PE 文件格式读取-read and save by PE document
Platform: |
Size: 3072 |
Author: 山于 |
Hits:
Description: 在《软件加密技术》这本书里看过PE文件各部分的详细解释之后，我也有了一个自己写PE文件分析器的的想法。虽然好的分析器不在少数，但对于一堆十六进制数，有些朋友可能不明白它代表什么意思。如果在程序里就可以将这些01序列转换成可以直接看懂得信息，那至少用户可以省去以后去查表的麻烦。怀着这样的想法，我仔细的研究了书中分析器PEInfo的源代码，我发现它没有提供信息转换的功能。
通过研究发现，PEInfo是通过PE文件在内存中的映象来获取文件信息的，我在想是否还有别的方法可以绕过将文件映象到内存这一步，直接读取文件信息。这样的方法只有直接读取磁盘上的PE文件，在磁盘上寻找所需要的文件信息。
在这里暂且不说这样的做法和内存映象法有什么优劣，我在此仅仅只是想找寻另一条解决问题的道路，并实现之。看完我的分析和源程序，大家自然知道孰优孰劣。-"software encryption technology," this book read PE part of the document detailed explanations, I have a paper to write his PE analyzer idea. Although good analyzer 2000, but a pile of hexadecimal number, some friends may not understand what it meant. If the program can be converted into 01 sequences can look directly understand information, That, at least users have no future to look-up table of trouble. With the idea, I carefully studied the book analyzer PEInfo of source code, I found that it did not provide data conversion functions. Found through research, through PE PEInfo document in memory mapping information to obtain documents, I wonder whether there are other ways to circumvent the document image to memory this step, direct read file information. This approach is only
Platform: |
Size: 110592 |
Author: heroin |
Hits:
Description: OEP是每个PE文件读取时的起始地址，该程序给出两种方法来读取OEP，一种是直接从PE文件读取；另一种是将PE映射到内存中来读取。-OEP each PE file read at the opening address, the program gives two ways to read OEP. A PE is directly from the document read. Another is to PE Maps memory to read.
Platform: |
Size: 32768 |
Author: byron |
Hits:
Description: 一个小病毒 代码。没什么危害，入门级人的。。高手就不用看了。。可以感染DOS下的COM EXE文件。。不能感染PE文件-a small virus code. No harm, the entry-level person. . Master would not have to read. . DOS can be infected with the EXE COM documents. . PE documents can be infected
Platform: |
Size: 2048 |
Author: monst |
Hits:
Description: 详细介绍WINDOWS PE文件格式，对PE格式有所兴趣的读者均可阅读-Details WINDOWS PE file format, on the PE format interested readers can read
Platform: |
Size: 712704 |
Author: haoyu |
Hits:
Description: 文件PE头的读取 文件PE头的读取-PE file header read the file PE header read
Platform: |
Size: 161792 |
Author: white_water125 |
Hits:
Description: Well, i started coding PE things to test my knowledge sometime ago..and almost without noticing my things started to grow in size and functionality. Basically this program will inform you about what i consider to be the most important pieces of information about a given PE file.
PE scanner,analizer,call it whatever.
Maybe the most usefull feature is the one concerning the import table.
Ok enough! go and try it! but first read on..
Platform: |
Size: 44032 |
Author: |
Hits:
Description: pe文件格式，把exe文件按照pe文件格式读出显示-pe file format, the exe file in accordance with the pe file format read out display
Platform: |
Size: 890880 |
Author: myname |
Hits:
Description: 分析PE文件的导入导出表 能够把一个exe内部的内容读出来-Analysis of PE files Import and Export table can transform an exe to read out the contents of internal
Platform: |
Size: 9216 |
Author: pl |
Hits:
Description: 说明：
1 例子程序在 vc6.0 +windows xp 编译测试过
2 需要阅读者对程序进程空间，编译，pe结构有一定的理解
3 这里根据自己认识加上对其他资料整理而成，对dll 简单的介绍
-Description: 1 examples of procedures vc6.0+ Windows xp compile tested 2 need to read about the process of the space program, the compiler, pe a certain degree of understanding of the structure of 3 here, according to their own awareness coupled with other data from the simple dll Introduction
Platform: |
Size: 327680 |
Author: 周晓宇 |
Hits:
Description: 这是应用移位算法生成组合的Perl包，包含两套函数，可生成形如 C(m,n)的数字序列组合，和多组的综合组合，具体请研读代码，有简要说明的。-This is the application of displacement algorithm to generate the Perl package combinations, including two sets of functions, such as creating form C (m, n) the number of sequence combinations, and a comprehensive portfolio of multi-group specific, please read the code, there is a brief description of the program.
Platform: |
Size: 1024 |
Author: liutao |
Hits:
Description: 关于pe文件结构的分析以及读文件和写文件
以及pe空洞病毒的实现-Pe file structure on the analysis and read files and write files and empty the virus to achieve pe
Platform: |
Size: 1514496 |
Author: wc |
Hits:
Description: exe文件完整性自校验,利用内存流读入自身exe文件PE头部空白处的四个字节,程序编译后需要用winhex软件将CRC值写入PE头部-exe file integrity self-checking, use the memory stream to read its own exe file PE header of four bytes of space, the program compiled the software will need to use winhex to write PE header CRC values
Platform: |
Size: 591872 |
Author: sine123 |
Hits:
Description: This software allows the comunication between an electronic circuit and a computer using a serial cable (RS232 pe)
Platform: |
Size: 15360 |
Author: Rocko13 |
Hits:
Description: 读取并显示PE文件信息
没有修改功能
但是基本上能够显示出大部分信息-read PE file info
Platform: |
Size: 4185088 |
Author: 林 |
Hits: