Windows PE文件结构及其加密的研究

Discussion on Structure of Windows PE File and Its Encryption

介绍了PE文件的基本结构,以及对PE文件的.text和.data块的DES加密过程.为了防止加密过的文件在执行时被动态调试软件如TRW2000、SOFTICE等跟踪,提出了 代码动态修正"思想,即对解密模块的部分关键代码在执行时予以修正,从而达到保护软件的目的.

This article introduces the basic structure of Windows PE file and the encryption of the .text and .data sections. It also presents a method of Anti-Debug which is called 'Code Dynamic Fixing'.