portable-executable
Strange Value in EXE header
I\'ve seen a strange value placed in EXE header 00000000 :4D 5A 90 00 03 00 00 00 - 04 00 00 00 FF FF 00 00[详细]
2022-12-18 15:24 分类:问答Find out where PE file ends through PE header?
I 开发者_开发知识库want to append some binary data to the end of my executable. This is just to make my program into a single file. I tried using UpdateResource but I hit some bug inside it with my sp[详细]
2022-12-18 03:25 分类:问答how can i hook a Api function from system dll?
i want to redirect the function calls of the real function calls from the system dll.i am working with portable-executable ,i can get IAT of the system dll(advapi32.dll),here the func开发者_JS百科tion[详细]
2022-12-17 07:08 分类:问答PE Header Requirements
What are the requirements of a PE file (PE/COFF)? What fields should be set, which value, at a bare minimum for enabling it to \"run\" on Windows (i.e. executing \"ret\" instruction and then close, wi[详细]
2022-12-16 12:24 分类:问答How to get exported function names from a .dll(system)?
I want the exported 开发者_StackOverflow中文版function namelist (by name and by ordinal) from a DLL. I got the function names(exported by name) using export directory table,but I can\'t retrieve the e[详细]
2022-12-15 21:09 分类:问答Write a value into PE file
I want to try the following: I have a C# program which takes a file as input and calculate MD5 algorithm for these five MD5. My algorithm has a unique value for each file; this value is a 128 bit v开[详细]
2022-12-12 19:06 分类:问答How to protect PE file resources(string,image....)?
I need any method to protect pe file resources form editing and thank you very much.. editing like: 1) open pe file as binary file and search about a s开发者_开发百科tring then edit it.[详细]
2022-12-10 19:02 分类:问答How do I read the PE header of a module loaded in memory?
I\'m experimenting with memory access in .NET. At the moment, I have a managed program that starts an unmanaged process and retrieves the BaseAddress of one of its loaded modules (a DLL). What I would[详细]
2022-12-08 05:22 分类:问答