搜索资源列表
PEfenxizhongji
- PE 文件分析程序, VisualC++编写, 作毕业设计时的作品, 大家可以瞧瞧哦-PE document analysis procedures, VisualC prepared for graduation design works, we can windows oh
PEMonitor_0.10_src
- 老罗写的监视pe文件的程序,采用Debug API的技术进行调试监视进程的API调用,了解软件的行为-old Luo wrote the document pe surveillance procedures, Debug API using the technology for the surveillance process debugging API calls, understanding the behavior of sof
virtus
- 一个小病毒 代码。没什么危害，入门级人的。。高手就不用看了。。可以感染DOS下的COM EXE文件。。不能感染PE文件-a small virus code. No harm, the entry-level person. . Master would not have to read. . DOS can be infected with the EXE COM documents. . PE documents can be i
PE_Info
- PE文件加壳信息的检测，可以检测出是哪个编译器编译和加壳。
yC1.3src
- I think this the first time every one can look at a PE crypter source in top level language such VC++. So as I promised ... if some one sent me one nice compress source I would publish my source. I dedicate this
pemodify
- Windows NT 3.1引入了一种名为PE文件格式的新可执行文件格式。PE文件格式的规范包含在了MSDN的CD中（Specs and Strategy, Specifications, Windows NT File Format Specifications），但是它非常之晦涩。本程序实现了对PE文件的修改.-Windows NT 3.1 introduces a file format called PE a new execu
PEInject
- 一般的为PE文件新增一个节的代码都是汇编代码,但是这是一个VC写的为PE文件新增一个节的代码,代码注释详尽!-General for the PE file add a section of the code are compiled code, but this is a VC for the PE file written in a new section of the code, the code detailed notes!
MessageAdder
- 文件加壳器，通过解析PE文件格式，将原有exe文件运行前添加一个提示消息框，常用于演示版程序-加壳documents, and through the analytic PE file format, the original exe file to run before the prompts to add a message box, commonly used in the demo program
peviewer
- PE文件头的查看工具,用于查看PE文件头-PE file header of the view the tool to view PE file header
Edpe
- 一个PE文件编辑工具,可以编辑PE信息和区段,输入表查看,内存地址和文件地址换,还可以查看进程和Dump进程.是一个比较综合的工具.-PE stamp text instance, met with startled件Tools, you can meet信startled PE Core messaging 区 kill, HUAI 入 barrels查vessels, twitter Rui Jian-hua Address add
Stud_PE
- 列举系统进程,PE文件格式的显示 列举系统进程,PE文件格式的显示-Listed systems process, PE file format display system, the process of enumeration, PE file format display
jiakeji
- 原理：对Pe文件的.data节，.text节进行XOR加密，然后将带解密的Loader写入文件头和第一个段的开头之间，修改Entry Point使其指向Loader. 测试用例：使用vc6.0自动生成的mfc对话框应用程序。 参考文献：(1)def源码 (2)黑客调试技术揭秘 (3)yoda s protector源码-Principle: The Pe documents. Data section,. Text
jiakeji1
- 原理：对Pe文件的.data节，.text节进行XOR加密，然后将带解密的Loader写入文件头和第一个段的开头之间，修改Entry Point使其指向Loader. 测试用例：使用vc6.0自动生成的mfc对话框应用程序。 参考文献：(1)def源码 (2)黑客调试技术揭秘 (3)yoda s protector源码-Principle: The Pe documents. Data section,. Text
sunblog_WindPE_v1
- Delphi写的PE查看器，附全部源码！希望对大家有用。-Delphi wrote PE Viewer, with full source code! Hope useful for everyone.
CheckPE
- 这个例子主要是介绍pe相关知识的 有了它,pe对于你来说是小菜一碟了-This example is mainly related knowledge pe Introduction With it, pe for you is a piece of cake
PEEncrypt
- PEEncrypt PE加密程序Delphi源代码，能保护你的PE文件-PEEncrypt PE encryption Delphi source code, to protect your PE file
setfile
- 此代码在程序运行的时候动态更改自己在任务管理器中显示的文件名. 代码中实现了将自身文件数据通过内存映射将自己保存在内存当中,.. 方便直接在内存执行程序,而不需要在硬盘保存有实际的文件名,实现 最近比较流行的无硬盘文件的病毒功能(目前在内存当中执行PE文件的 功能暂未实现,有兴趣的朋友可以参考<<加密解密技术>>一书), 本程序还实现了挂接系统关机 注销 重启..等事件,当发生以上事件,程序会
WritePE
- 演示如何修改PE文件，在运行的时候先弹出一个提示框-Demonstration of how to modify the PE file, when running the first pop up a prompt box
masm
- 汇编语言全接触，里面是汇编的win32汇编教程、odbc教程、vxd教程、pe教程等。-Keys assembly language, which is compiled win32 compilation of tutorials, odbc tutorial, vxd tutorials, pe, etc. tutorials.
pemaker0
- 编译环境VC+6.0，压缩包中包含1）用来修改头部的EXE文件2）测试程序。有助于让我们了解病毒是如何感染PE文件-Compiler environment VC+ 6.0, compressed package that contains one) is used to modify the head of the EXE file 2) test procedures. Help us to understand how the v