Location:
Search - pefile
Search list
Description: 本程序功能是分析PE文件结构，只作了最简单的分析。把输入表，输出表，还有各个段显示出来。参考了2个源码，写得很简单，是vc控制台程序，可以在这基础上扩展。我同时附上PE文件结构图，结合图片理解程序。只是时间仓促，注释写得少一点。-the functions of the program is to analyze PE structure of the document, only made the most simple analysis. Importation table, the output table, and all of the show. Reference to the two-source, write a very simple, yes vc console procedures, the basis of this expansion. I accompanied PE paper chart with photographs understanding procedures. Only hastily written notes less.
Platform: |
Size: 84178 |
Author: 林风 |
Hits:
Description: 专门介绍WINDOWS的PE文件格-devoted to the Windows PE file grid
Platform: |
Size: 219813 |
Author: 泽寒 |
Hits:
Description: PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。-PE document windows (9598NT) of the executable file format. Popular CIH virus is through changes in PE content of the document, and to maintain the size of the same document, thus achieving its own functions. The procedures by analyzing PE file format, the executable files repositioning positioning table, prepared by the user at DLL, and then returned to normal indicators directive calling location. The DLL system by linking the background to achieve various levels of password function intercepted.
Platform: |
Size: 112507 |
Author: 王峰 |
Hits:
Description: 分析PE文件的导入导出表 能够把一个exe内部的内容读出来
Platform: |
Size: 9413 |
Author: pl |
Hits:
Description: 专门介绍WINDOWS的PE文件格-devoted to the Windows PE file grid
Platform: |
Size: 219136 |
Author: 泽寒 |
Hits:
Description: PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。-PE document windows (9598NT) of the executable file format. Popular CIH virus is through changes in PE content of the document, and to maintain the size of the same document, thus achieving its own functions. The procedures by analyzing PE file format, the executable files repositioning positioning table, prepared by the user at DLL, and then returned to normal indicators directive calling location. The DLL system by linking the background to achieve various levels of password function intercepted.
Platform: |
Size: 112640 |
Author: 王峰 |
Hits:
Description: 全面揭示PE文件的核心机密!彻底揭开PE结构的面纱!-comprehensive document reveals the core secrets! PE completely open structure of the veil!
Platform: |
Size: 100352 |
Author: 曾是命 |
Hits:
Description: 本程序功能是分析PE文件结构，只作了最简单的分析。把输入表，输出表，还有各个段显示出来。参考了2个源码，写得很简单，是vc控制台程序，可以在这基础上扩展。我同时附上PE文件结构图，结合图片理解程序。只是时间仓促，注释写得少一点。-the functions of the program is to analyze PE structure of the document, only made the most simple analysis. Importation table, the output table, and all of the show. Reference to the two-source, write a very simple, yes vc console procedures, the basis of this expansion. I accompanied PE paper chart with photographs understanding procedures. Only hastily written notes less.
Platform: |
Size: 83968 |
Author: 林风 |
Hits:
Description: 分析PE文件的导入导出表 能够把一个exe内部的内容读出来-Analysis of PE files Import and Export table can transform an exe to read out the contents of internal
Platform: |
Size: 9216 |
Author: pl |
Hits:
Description: 自动解析Windows下可执行文件PE文件头，代码规范有注释，是学习PE结构的好资料-windows PE file header study
Platform: |
Size: 25600 |
Author: goodone |
Hits:
Description: 使用C语言分析Windows的PE文件格式源码,
函数封装在pe/pe.h中,PE File.c是一个简单的测试代码 !-The use of C language analysis of the PE file format Windows source code, function is packaged in a pe/pe.h in, PE File.c is a simple test code!
Platform: |
Size: 1513472 |
Author: 郭子 |
Hits:
Description: 在C语言的基础上实现感染PE文件的源代码-In the C language on the basis of PE files infected with the source code
Platform: |
Size: 4096 |
Author: 艾尔文 |
Hits:
Description: PE 文件判断工具.使用C++Builder编写.小巧,适合初学者学习PE文件结构.-PE file adjust
Platform: |
Size: 195584 |
Author: 大包 |
Hits:
Description: 可以显示pe文件的结构
是学习pe文件的良好软件和源码-peFile
Platform: |
Size: 29696 |
Author: 李伟 |
Hits:
Description: Modify win PE-32 Header File
Platform: |
Size: 8192 |
Author: vionanda |
Hits:
Description: pe文件分析工具！你下了就知道了，很OK——不解释了！-pe file analysis tool!
Platform: |
Size: 5445632 |
Author: 萧萧 |
Hits:
Description: 比较详细的讲解了pe的内部格式，以及加载原理-Pe explained in more detail the internal format, and load the principle
Platform: |
Size: 219136 |
Author: cuijingbing |
Hits:
Description: 为了获得PE文件中所包含的重要信息，我编写了一个名为PEFILE.DLL的动态链接库，本文中所有出现的源码示例亦均摘自于此。这个DLL和它的源代码都作为PEFile示例程序的一部分包含在了CD中（译注：示例程序请在MSDN中寻找，本站恕不提供），你可以在你自己的应用程序中使用这个DLL；同样，你亦可以依你所愿地使用并构建它的源码。在本文末尾，你会找到PEFILE.DLL的函数导出列表和一个如何使用它们的说明。我觉得你会发现这些函数会让你从容应付PE文件格式的。
-In order to obtain PE file contains important information, I wrote a dynamic link library named PEFILE.DLL this article appeared in the source code for all examples always make is taken from here. The DLL and its source code as part of the process PEFile sample included in the CD, (Annotation: sample program to find in the MSDN, this site will not be available), you can in your own applications using this DLL Similarly, according to you wish you can also use the source code and build it. In the end of this article, you will find PEFILE.DLL function export list and a description of how to use them. I think you will find that these functions will let you comfortably meet the PE file format.
Platform: |
Size: 10240 |
Author: wangzhneghui |
Hits:
Description: PE文件结构图，两张非常有价值的图片，一张是PE文件格式示意图，另一张是PE结构图，值得收藏。-PE file structure diagram, two very valuable pictures, one is a PE file format diagram, another one is PE chart,they are worth collecting.
Platform: |
Size: 849920 |
Author: |
Hits:
Description: 一个比较适合新手学习用的MFC pe文件导入函数使用方法-A more suitable for beginners to learn the MFC PE file with import function USES the method
Platform: |
Size: 3627008 |
Author: fdf |
Hits: