搜索资源列表
dll(loader)
- 说明： 1 例子程序在 vc6.0 +windows xp 编译测试过 2 需要阅读者对程序进程空间，编译，pe结构有一定的理解 3 这里根据自己认识加上对其他资料整理而成，对dll 简单的介绍 -Descr iption: 1 examples of procedures vc6.0+ Windows xp compile tested 2 need to read about the process of the space program, the compiler
Morphine
- Morphine v2.7，程序压缩源码，保护程序不被恶意修改-Morphine is very unique application for PE files encryption. Unlike other PE encryptors and compressors Morphine includes own PE loader which enables it to put whole source image to the .text section of new PE fi
27176565
- 加壳机（vc源码）源码在vc7+xp-sp2下编译通过 原理：对Pe文件的.data节，.text节进行XOR加密，然后将带解密的Loader写入文件头和第一个段的开头之间，修改Entry Point使其指向Loader. 测试用例：使用vc6.0自动生成的mfc对话框应用程序。 参考文献：(1)def源码 (2)黑客调试技术揭秘 (3)yoda s protector源码 存在问题：只对.data节,.text节加密，且其中不能包含Resource，Import T
Peloader
- pe loader 可以自己加载pe文件 非常好用，不要干坏事-pe loader
x32_HookExp
- Inject easy pe-loader code into Explorer (x32) and load module in this process. Playload create in obj file(masm32), linked in Visual Studio
RunPE
- Run PE Loader ( Memory Loader )
LWE
- PE Loader, loading PE files in the memory without disk images, This is the basis of packers/crypters/etc. Implementation there are two - manual loading, and wrapper on the system loader(ntldr)
ssmon
- VT Debugger with Open Source 这个是拿BluePill的代码作为Base，硬改成调试器。 构思到代码成型花掉我一年时间，幸亏公司活少，给了我充足的时间。 这个是摘自本人的简历内容。 XP系统的汇编级双机调试器，同时可以调试内核线程和普通线程。 Bypass 业界全部的AntiDebug系统。 Builtin with below Functions. 1. AMD VT System, 2. Internal
eLib_PeLoader_fne_Static
- pe加载器 易语言支持库 可以添加到易语言文件目录 在易语言中调用PE加载器-PE loader easy language support library can be added to the yi language file directory Call PE loader in the yi language
Run.~dpr
- Delphi project. Pe Loader. Load program file buffer.
PELoader
- PE装载器的例子，处理了导入表、重定位表。-PE loader example, handling the import table, relocation table.
win_ldr
- windows pe loader, ripped reactos-windows pe loader, ripped reactos
Bo2K loader
- 不创建进程，直接可以在内存加载pe文件，不使用Loadlibrary，直接在内存中展开加载(Do not create a process, you can directly load PE files in memory, do not use Loadlibrary, directly in memory expansion load)
Blackbone-master
- Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all (32/64 bit) modules loaded. Enu
PEBrowseV10_1_5
- PE Explorer & Windows DLL Disassembly