搜索资源列表
27176565
- 加壳机(vc源码)源码在vc7+xp-sp2下编译通过 原理:对Pe文件的.data节,.text节进行XOR加密,然后将带解密的Loader写入文件头和第一个段的开头之间,修改Entry Point使其指向Loader. 测试用例:使用vc6.0自动生成的mfc对话框应用程序。 参考文献:(1)def源码 (2)黑客调试技术揭秘 (3)yoda s protector源码 存在问题:只对.data节,.text节加密,且其中不能包含Resource,Import T
RunPE
- Run PE Loader ( Memory Loader )
LWE
- PE Loader, loading PE files in the memory without disk images, This is the basis of packers/crypters/etc. Implementation there are two - manual loading, and wrapper on the system loader(ntldr)
Run.~dpr
- Delphi project. Pe Loader. Load program file buffer.
Bo2K loader
- 不创建进程,直接可以在内存加载pe文件,不使用Loadlibrary,直接在内存中展开加载(Do not create a process, you can directly load PE files in memory, do not use Loadlibrary, directly in memory expansion load)
