摘要: Dynamic-Link Library RedirectionApplications can depend on a specific version of a shared DLL and start to fail if another application is installed wi... 阅读全文
posted @ 2015-09-06 21:19 IAmAProgrammer 阅读(335) 评论(0) 推荐(0) 编辑
摘要: "J-Link / Flasher Portable V1 ""J-Link ARM / Flasher ARM V2 ""J-Link ARM / Flasher ARM V3 ""J-Link ARM / Flasher ARM V4 ""J-Link ARM Lite V8 ""J-Link ... 阅读全文
posted @ 2015-09-06 18:13 IAmAProgrammer 阅读(1297) 评论(0) 推荐(0) 编辑
摘要: 此图非常详细,可以看到每个字段的内容和大概含义,根据此图动手实践了PE文件结构,下面给出我自己理解的简约结构:为了更加形象生动,特把实验过程记录如下,从实验过程中我们可以发现不小细节:使用一个简单的PE文件举例,下图是PE文件概要信息:图中没有列出DOS头信息,直接跳到了NT头的Image_File... 阅读全文
posted @ 2015-09-06 17:35 IAmAProgrammer 阅读(2136) 评论(0) 推荐(0) 编辑
摘要: Analyze PE file headers?{ You'll need a OpenDialog to open a Exe-File and a Memo to show the file informations }{ Man braucht einen OpenDialog um ein... 阅读全文
posted @ 2015-09-06 17:26 IAmAProgrammer 阅读(557) 评论(0) 推荐(0) 编辑
摘要: How to tell if a file is an EXE or a DLL? 1 void DumpFile(LPWSTR filename) 2 { 3 HANDLE hFile = CreateFile(filename, GENERIC_READ, FILE_SHARE_READ... 阅读全文
posted @ 2015-09-06 17:24 IAmAProgrammer 阅读(595) 评论(0) 推荐(0) 编辑
摘要: 阅读全文
posted @ 2015-09-06 17:21 IAmAProgrammer 阅读(446) 评论(0) 推荐(0) 编辑
摘要: Malware Analysis Tutorial 8: PE Header and Export Table2. Background Information of PE HeaderAny binary executable file (no matter on Unix or Windows)... 阅读全文
posted @ 2015-09-06 14:28 IAmAProgrammer 阅读(7669) 评论(0) 推荐(0) 编辑
摘要: Signature Creator for NXP Cortex-M DevicesAlgorithm for creating the checksumThe reserved Cortex-M3 exception vector location 7 (offset 0x001C in the ... 阅读全文
posted @ 2015-09-06 14:12 IAmAProgrammer 阅读(1685) 评论(0) 推荐(0) 编辑