搜索资源列表
教你如何作弊玩扫雷
- 最近闲暇时间迷上了扫雷,有的时候经常遇到模棱两可的地方,很容易死到.于是就在想,要是我一开始就知道哪个地方有雷就好了.遂打开OllyDBG,对扫雷程序(WinMine.exe),进行了一番跟踪.好在WinMine.exe没有加壳,直接看它的IMPORT TABLE,在两个可疑的API上下断点,一个就是GDI.BitBlt,这个是程序来画地图的,另一个就是User32.GetDlgItemInt,这个用来获得扫雷地图大小,和雷的个数的. -recent spell of the mine,
PE_Labs
- Well, i started coding PE things to test my knowledge sometime ago..and almost without noticing my things started to grow in size and functionality. Basically this program will inform you about what i consider to be the most important pieces of infor
stnpepaksrc
- stnpepak 源码及程序 Stone 实现了对Import Table的处理,Win32ASM源码。 -stnpepak source Stone and procedures to achieve the right Import Table handling Win32ASM source.
pe
- PE文件详解 包括 DOS Header, PE Header Optional Header, Export Table ,Import Table, Section Table 详尽的代码一一帮你分解,为你解开pe文件的面纱.希望对大家有所帮助.
explorerpe_src.rar
- PE格式简易解析器V1.0,可以解析出PE各个部分的数据解析出来用于分析,主要包括基本数据段、数据目录、区段信息、导入表、导出表、重定位表、资源表。,PE Parser summary format V1.0, can resolve the various parts of the PE from the data analysis used to analyze, including the basic data segment, data directory, section inform
PE
- 可以查看PE结构信息.包括节区表,导入表和导出表.是学习PE结构的好东西.-PE can view the structure of information. Including the Festival District Table, Import Table and Export Table. PE are studying the structure of good things.
PEView1.0
- 分析PE文件的基本信息、导入表、导出表、资源和节等信息-Analyser for PE file,basic information, import table, export table, resources and section
itview
- 查看windows import table的原代码 -source code for PE file import table view.
stnpepak
- 实现了对Import Table的处理,Win32ASM源码。作者Stone-Import Table for implementation of the deal, Win32ASM source. Author Stone ..
altibase
- 需要了解iLoader工具的参数,然后创建表,导入表-ILoader tools need to be aware of the parameters, and then create a table, import table
PEResolve
- 该源码解析一个PE文件,打印其输入表、输出表、重定位表等详细信息!-this code resolves a file of PE type,and print the information of the file s import table,export table and relocal table,etc.
edit_pe_import_table
- 《导入表内注入代码》文章代码,本文介绍注入代码到PE(Portable Executable可移植的执行体)文件格式的Import Table(导入表,也有译为“引入表”)技术,其也被称为API重定向技术(API redirection technique)。 -" Import the table into the code" article code, article describes the code injected into the PE (Portable Exe
27176565
- 加壳机(vc源码)源码在vc7+xp-sp2下编译通过 原理:对Pe文件的.data节,.text节进行XOR加密,然后将带解密的Loader写入文件头和第一个段的开头之间,修改Entry Point使其指向Loader. 测试用例:使用vc6.0自动生成的mfc对话框应用程序。 参考文献:(1)def源码 (2)黑客调试技术揭秘 (3)yoda s protector源码 存在问题:只对.data节,.text节加密,且其中不能包含Resource,Import T
load
- 修改导入表加载dll的完整源代码,通过此代码,可以加载任何你需要插入的dll文件-Modify the import table loaded dll' s complete source code, by this code, you can load any dll files you need to insert
0x48k-bitsloader
- 0x48k BITS DOWNLOADER FEATURES - downloading manual number of files - report to stat scr ipt, if downloading success (for each file) - using BITS (Background Intelligent Transfer Service) for downloading - bypass most of firewalls (than
PE_explorer
- PE 可执行文件结构查看软件。可以查看PE文件所含的段、RVA、优先装载地址、导入、导出表等各类信息。-PE executable file structure viewing software. You can view PE file contained in the section, RVA, preferred load address, import, export table, and other information.
PE
- 分析PE,查看PE文件导出表和导入表-Analysis of PE, see PE file export tables and import table
rewolf.hooklib.v1.0
- Small hook library. It contain three methods of hooking: - IAT hooks - import table hooks, functions are hooked only in one module (IAT owner module) - EAT hooks - export table hooks, functions are hooked for all modules (modules lo
Import
- 能够查看 PE 文件的导入表,有助于深入学习PE文件格式-Be able to view the PE file import table, help-depth study of the PE file format
PE-Files-Import-Table-Rebuilding
- PE Import Table Rebuilding