首页
社区
课程
招聘
[下载]PE Corrector
发表于: 2005-9-2 07:57 2885

[下载]PE Corrector

2005-9-2 07:57
2885
PE Corrector, as its name implies, is created for correcting Windows Portable Executable files (exe, dll, sys, bpl, dpl, cpl, ocx, acm, ax, scr). Unfortunately, when these files get compiled, a lot of extraneous information makes its way into the final file version. This extraneous information may include headers, strings with illegal characters, export debugging functions and so on.

Sadly, some compilers (like Borland C++ Builder, for example) insert this "binary trash" into the compiled file, which significantly increases its final size. More dangerously, it gives hackers direct clues about how your program works and what is the easiest way to by-pass its defense.

PE Corrector is very useful when you need to correct such files. Correction may be very necessary in this cases:

Some compilers (Borland C++ Builder 4, for example) do not clear memory before compilation. Because of this the new exe file may contain binary trash in the header. But also it may contain even your personal security data from your disks (passwords, for example). PE Corrector can correct this problem. It simply cleans the headers in safe mode and erases all illegal information. Also you can insert your own info into header (copyright information, for example).

Some compilers inserts into PE files a number of export functions which are needed for debugging, but not for final compilation (examples of such functions: __CPPdebugHook, _Form1, __GetExceptDLLinfo, @@Unit1@Initialize, @@Unit1@Finalize, etc...). These export functions adds some extra volume to PE file and not necessary in most cases. But it is not the whole problem. If there are many exports in PE file, this file may not be processed correctly by some exe-packers. Also it may contain some secret functions (defence of trial, for example) declared in export section of PE file. This situation is very useful for crackers. PE Corrector helps you to solve this problem. It displays all of the exported functions and gives ability to clean export sections on the optional basis (you simply specify what functions you want to erase).
So, if you keep PE file "as is" after compilation, probably you will give very useful gift to crackers.

But PE Corrector can help you! PE Corrector removes unnecessary debugging functions, clear binary trash in headers, organizes internal file structure, erases section names (.rsrc, .reloc, .pdata, etc...), removes relocations table. In addition, PE Corrector allows programmers to insert own data into header (copyright information, for example), examine the list of the export functions, prepare PE files for exe-packers and reduce their size.

Best of all, PE Corrector can be tried free of charge. The experiments demonstrated that the size of any executable file can be decreased by 15-50%. Cracking files after their have been processed with PE Corrector becomes much more difficult.

If you have learned about PE Corrector just now, then we recommend you to read the article about PE Corrector: "Fixing compilation bugs inside PE files". You will get to know more about the program.

Main Features of PE Corrector
PE Corrector is a feature-rich application. Main features are described below. If you want to familiarize yourself with all program features, please visit features page.

Cleaning of the binary trash in the headers of PE files
Text insertion into header (copyright information, for example)
Erasing section names (.rsrc, .reloc, .pdata, etc...)
Removing relocations table
Examination of the exported functions list
Erasing of selected functions in the export section
PE file size minimization
Full command line support
Preparing PE file for exe-packers
Protecting PE files from crackers
下载:http://www.gigamindsystems.com/pec/

[课程]Android-CTF解题方法汇总!

收藏
免费 0
支持
分享
最新回复 (5)
雪    币: 93920
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
2
http://www.gigamindsystems.com/pec/PECorrector_Setup.exe
2005-9-2 11:21
0
雪    币: 61
活跃值: (160)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
3
是不是PE文件头纠正工具
2005-9-2 15:35
0
雪    币: 93920
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
4
它的主页写的很清楚啊。
2005-9-2 16:17
0
雪    币: 427
活跃值: (412)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
看起来好像很强
2005-9-2 20:27
0
雪    币: 93920
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
6
最初由 鸡蛋壳 发布
看起来好像很强


你很长时间没来。
2005-9-2 20:27
0
游客
登录 | 注册 方可回帖
返回
//