原创 iczelion pe tut2
Tutorial 2: Detecting a Valid PE File In this tutorial, we will learn how to check if a given file is a valid PE file
原创 iczelion Vxd tut3
Virtual Device Driver SkeletonNow that you know something about VMM and VxD, we can learn how to code a VxD. You nee
原创 iczelion pe tut4
Tutorial 4: Optional Header We have learned about the DOS header and some members of the PE header. Here's the last,
原创 iczelion pe tutcn7
PE教程7: Export Table(引出表) 上一課我們已經學習了動態聯接中關於引入表那部分知識,現在繼續另外一部分,那就是引出表。 理論: 當PE裝載器執行一個程序,它將相關DLLs都裝入該進程的地址空間。然後根據主程序的引
原创 iczelion Vxd tut2
Virtual Machine ManagerVirtual Machine Manager (VMM) is the true operating system behind Windows 95. It erects and m
原创 iczelion tut32
Tutorial 32: Multiple Document Interface (MDI) This tutorial shows you how to create MDI application. It's actually not
原创 iczelion tut31
Tutorial 31: Listview Control We will learn how to create and use the listview control in this tutorial. Theory: A
原创 iczelion pe tut5
Tutorial 5: Section Table Theory: Up to this tutorial, we learned about the DOS header, the PE header. What remains
原创 iczelion pe tutcn4
PE教程4: Optional Header 我們已經學習了關於 DOS header 和 PE header 中部分成員的知識。這裏是 PE header 中最後、最大或許也是最重要的成員,optional header。 回顧一下
原创 iczelion pe tut6
Tutorial 6: Import Table We will learn about import table in this tutorial. Let me warn you first. This tutorial is a
原创 iczelion pe tutcn3
PE教程3: File Header (文件頭) 本課我們將要研究 PE header 的 file header(文件頭)部分。 至此,我們已經學到了哪些東東,先簡要回顧一下: DOS MZ header 又命名爲 IMAGE_DO
原创 iczelion pe tutcn1
PE教程1: PE文件格式一覽 考慮到早期寫的PE教程1是自己所有教程中最糟糕的一篇,此番決心徹底重寫一篇以饗讀者。 PE 的意思就是 Portable Executable(可移植的執行體)。它是 Win32環境自身所帶的執行體文件
原创 iczelion pe tutcn6
PE教程6: Import Table(引入表) 本課我們將學習引入表。先警告一下,對於不熟悉引入表的讀者來說,這是一堂又長又難的課,所以需要多讀幾遍,最好再打開調試器來好好分析相關結構。各位,努力啊! 下載範例。 理論: 首先,您得
原创 iczelion pe tut1
Tutorial 1: Overview of PE file format This is the complete rewrite of the old PE tutorial no1 which I considered the
原创 iczelion pe tut3
Tutorial 3: File Header In this tutorial, we will study the file header portion of the PE header. Let's summarize wh