English 中文(简体)
PE 文档中校正
原标题:Modifying .rdata unicode strings from windows PE files

我一直在寻找一种办法,对存储在Windows .exe文档中的静态座标进行修改,但我没有发现这样做的真正方法。

  • The whole thing is too complicated to do by hand (in this case by a HEX editor) and so I wanted to know if you have a solution to do so.
问题回答

在编辑中这样做有什么复杂之处? 也许会去找你的一个道道是,你必须保持每张str的长度。 你们可以通过最终或(有时)提前取消空间而这样做,这取决于它如何以可执行的方式加以利用。

如果你真的想要trick,你可以尝试找到在守则中所说的话的每一个交叉点,并修改使用该词的长度参数。





相关问题
Why running a service as Local System is bad on windows?

I am trying to find out the difference between difference service account types. I tumbled upon this question. The answer was because it has powerful access to local resources, and Network Service ...

Programmatically detect Windows cluster configuration?

Does anyone know how to programatically detect that a Windows server is part of a cluster? Further, is it possible to detect that the server is the active or passive node? [Edit] And detect it from ...

get file icon for Outlook appointment (.msg)

I ve read Get File Icon used by Shell and the other similar posts - and already use SHFileInfo to get the associated icon for any given extension, and that works great. However, Outlook uses ".msg" ...

Identifying idle state on a windows machine

I know about the GetLastInputInfo method but that would only give me the duration since last user input - keyboard or mouse. If a user input was last received 10 minutes ago, that wouldn t mean the ...

Terminating a thread gracefully not using TerminateThread()

My application creates a thread and that runs in the background all the time. I can only terminate the thread manually, not from within the thread callback function. At the moment I am using ...

热门标签