原创 iczelion pe tut2

  Tutorial 2: Detecting a Valid PE File In this tutorial, we will learn how to check if a given file is a valid PE file

原创 iczelion Vxd tut3

  Virtual Device Driver SkeletonNow that you know something about VMM and VxD, we can learn how to code a VxD. You nee

原创 iczelion pe tut4

  Tutorial 4: Optional Header We have learned about the DOS header and some members of the PE header. Here's the last,

原创 iczelion pe tutcn7

  PE教程7: Export Table(引出表) 上一課我們已經學習了動態聯接中關於引入表那部分知識,現在繼續另外一部分,那就是引出表。   理論: 當PE裝載器執行一個程序,它將相關DLLs都裝入該進程的地址空間。然後根據主程序的引

原创 iczelion Vxd tut2

  Virtual Machine ManagerVirtual Machine Manager (VMM) is the true operating system behind Windows 95. It erects and m

原创 iczelion tut32

Tutorial 32: Multiple Document Interface (MDI) This tutorial shows you how to create MDI application. It's actually not

原创 iczelion tut31

Tutorial 31: Listview Control We will learn how to create and use the listview control in this tutorial.   Theory: A

原创 iczelion pe tut5

  Tutorial 5: Section Table   Theory: Up to this tutorial, we learned about the DOS header, the PE header. What remains

原创 iczelion pe tutcn4

  PE教程4: Optional Header 我們已經學習了關於 DOS header 和 PE header 中部分成員的知識。這裏是 PE header 中最後、最大或許也是最重要的成員,optional header。 回顧一下

原创 iczelion pe tut6

  Tutorial 6: Import Table We will learn about import table in this tutorial. Let me warn you first. This tutorial is a

原创 iczelion pe tutcn3

  PE教程3: File Header (文件頭) 本課我們將要研究 PE header 的 file header(文件頭)部分。 至此,我們已經學到了哪些東東,先簡要回顧一下: DOS MZ header 又命名爲 IMAGE_DO

原创 iczelion pe tutcn1

  PE教程1: PE文件格式一覽 考慮到早期寫的PE教程1是自己所有教程中最糟糕的一篇,此番決心徹底重寫一篇以饗讀者。 PE 的意思就是 Portable Executable(可移植的執行體)。它是 Win32環境自身所帶的執行體文件

原创 iczelion pe tutcn6

  PE教程6: Import Table(引入表) 本課我們將學習引入表。先警告一下,對於不熟悉引入表的讀者來說,這是一堂又長又難的課,所以需要多讀幾遍,最好再打開調試器來好好分析相關結構。各位,努力啊! 下載範例。 理論: 首先,您得

原创 iczelion pe tut1

  Tutorial 1: Overview of PE file format This is the complete rewrite of the old PE tutorial no1 which I considered the

原创 iczelion pe tut3

  Tutorial 3: File Header In this tutorial, we will study the file header portion of the PE header. Let's summarize wh