搜索资源列表
insertcode
- PE可执行文件的镶入式程序的编写方法及示例(镶入式后门程序&原程序) 由于Microsoft公司的Windows系统是当前大部分个人电脑所使用的操作系统 主要包括win95,98,me,nt4,2000,xp等，而这些系统所使用的可执行文件的格式基 本上是PE结构的。这里的可执行文件的镶入式程序就是针对PE结构的可执行文件。 这里先简单说一下PE文件框架结构： DOS MZ header DOS stub//在不支持 PE文件格式的操作
PE文件教程
- PE文件教程,很有用的-PE File Directory, a very useful
PE 文件的感染WIN32CPP代码
- PE 文件的感染WIN32CPP代码-PE document WIN32CPP source of infection
PETools
- 一份PE文件修改的VC源码，可查看PE文件的大量信息和修改部分文件信息，可查看进程加载的模块。-a PE files VC source, PE document can be found on the vast amount of information and documents to amend some information can be found on the module loading process.
PEdump_src_2001
- 这是使我最受益的学习PE文件的代码。让我终生受益！-This is my greatest benefit of learning PE document code. Allow me to enjoy the benefits!
FindOEP
- OEP是每个PE文件读取时的起始地址，该程序给出两种方法来读取OEP，一种是直接从PE文件读取；另一种是将PE映射到内存中来读取。-OEP each PE file read at the opening address, the program gives two ways to read OEP. A PE is directly from the document read. Another is to PE Maps memor
yC1.3src
- I think this the first time every one can look at a PE crypter source in top level language such VC++. So as I promised ... if some one sent me one nice compress source I would publish my source. I dedicate this
PEInject
- 一般的为PE文件新增一个节的代码都是汇编代码,但是这是一个VC写的为PE文件新增一个节的代码,代码注释详尽!-General for the PE file add a section of the code are compiled code, but this is a VC for the PE file written in a new section of the code, the code detailed notes!
CheckPE
- 这个例子主要是介绍pe相关知识的 有了它,pe对于你来说是小菜一碟了-This example is mainly related knowledge pe Introduction With it, pe for you is a piece of cake
DllView
- PE文件分析实现了 dll导入到出函数的察看,PE文件分析实现了 dll导入到出函数的察看.-Analysis of PE files into a dll a function of View, PE Analysis of the realization of the dll file into a function of View.
OEP
- 基于visual c++的 可以获取pe文件的oep，即每个exe或dll文件加载的起始地址。-Based on visual c++ Can obtain pe documents oep, that is, each exe or dll file to load the starting address.
PE_delphi_VC
- PE文件分析，源代码为VC6.0版本和Delphi7.0版本。参考价值很大。-PE document analysis, the source code for VC6.0 version and Delphi7.0 version. Great reference value.
AddCodeBeforeExe
- 利用C++和内嵌汇编将一段代码添加到EXE文件的开头，提示用户是否真要运行这个EXE文件。演示了如何操作PE文件头部。-The use of C++ And embedded compilation will be added to a section of code at the beginning of EXE files, prompts the user really want to run the EXE file. Demo
checkPE
- 这个是一个用汇编编写的查看PE文件有效性的程序，PE加载器需要做的事情之一。-err
WritePE
- 改写PE文件，插入特定代码！静态注入,一个改写插入代码的例子！VS2005编译-Rewrite PE file, insert the specific code! Static injection, insert a rewritten code examples! VS2005 compiler
VBMAKEKE
- VB制作的加壳工具只是修改了PE文件头.很轻松的就可以脱掉了.声明本人所上传代码如果没有特别声明都是来自VBGOOD论坛-VB Tools加壳produced only modify the PE file header. Very easily can be off. Statement From my code if there is no special statement from VBGOOD Forum
PE
- 可以查看PE结构信息.包括节区表,导入表和导出表.是学习PE结构的好东西.-PE can view the structure of information. Including the Festival District Table, Import Table and Export Table. PE are studying the structure of good things.
MemCpy
- Mem Copier This source code of my old program to copying memory image it saves copied image to file so ye you can dump raw pe image using it-Mem Copier This is source code of my old program to copying memory image it sav
Pack
- 对PE文件进行完整压缩的程序，使用aplib进行压缩，并且示范了输入表加密等常见功能，对PE文件进行分区段压缩，外壳部分使用C编写，解压的部分代码使用汇编-Complete compression of the PE file program, use the aplib compression, and encryption model input tables common features of the PE segment pa
pe
- 为PE添加数字签名VC6代码 数字签名添加-For the PE to add a digital signature VC6 code to add a digital signature