| 向PE文件中插入可执行代码的研究 |
| |
| 引用本文： | 胡珊. 向PE文件中插入可执行代码的研究[J]. 鞍山科技大学学报, 2005, 28(2): 119-122,126 |
| |
| 作者姓名： | 胡珊 |
| |
| 作者单位： | 鞍山科技大学计算机科学与工程学院 辽宁鞍山 114044 |
| |
| 摘 要： | 根据Win32 PE文件的结构特征，实现了两种不同的向PE文件中插入可执行代码的方法：(1)在本节中的未用空间中插入代码；(2)添加新的节。指出在编写要添加的代码的过程中，要注意插入代码的变量地址的重定位和代码返回改动态获取API入口地址等问题。
|
| 关 键 词： | 可移植的执行体文件 虚拟地址 相对虚拟地址 原始地址 |
| 文章编号： | 1672-4410(2005)02-0119-05 |
Study on inserting executable codes into PE files |
| |
| HU Shan. Study on inserting executable codes into PE files[J]. Journal of Anshan University of Science and Technology, 2005, 28(2): 119-122,126 |
| |
| Authors: | HU Shan |
| |
| Abstract: | According to the structure character of win32 PE file,two ways were realized to insert code into PE file:(1) insert code at the space available of the node,(2)add new node.And some problems such as variable address reorientation when code was inserted and acquirement of API entrance address of changing dynamic when code returned were presented in the process of writing the added code. |
| |
| Keywords: | portable and executable file virtual address relative virtual address raw address |
| 本文献已被 CNKI 维普 等数据库收录！ |
