Re: Execute file from memory

Article View: borland.public.delphi.nativeapi

Article #12098

Back to borland.public.delphi.nativeapi Previous Next

#12098

From: Mike Williams (TeamB)
Date: Mon, 25 Nov 2002 16:39

17 lines
1458 bytes

On 25 Nov 2002, "John Herbster \(TeamB\)" <herb-sci at novus-tele.net> 
wrote:

> If the EXE file is encrypted, how would you or the
> OS know where the entry point is?  Rgds, JohnH

The same way exe compressors work: an unencrypted stub program 
decompresses/decrypts the real program, loads the entire thing into memory, 
and starts it running.  However, if I knew how to do that I'd have answered 
already.

A google search turned up an exe compressor with C source:

http://www.eskimo.com/~scottlu/win/

-- 
-Mike (TeamB)

Technical Details

Message-ID: <Xns92D176A1D472Bmikewteamb@207.105.83.65>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-05!sn-xit-01!sn-xit-08!supernews.com!newsfeed.news2me.com!border1.nntp.aus1.giganews.com!nntp.giganews.com!newsfeed1.cidera.com!Cidera!news.uni-x.net!newsgroups.borland.com!not-for-mail

References: <3de239af$1@newsgroups.borland.com> <3de24ef7$1@newsgroups.borland.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f94dd,eb1786436ac8b934
X-Google-Attributes: gidf94dd,public
X-Google-ArrivalTime: 2002-11-25 09:15:51 PST
Newsgroups: borland.public.delphi.nativeapi
Subject: Re: Execute file from memory
From: "Mike Williams (TeamB)" <mikew@remove.aps-soft.com>
References: <3de239af$1@newsgroups.borland.com> <3de24ef7$1@newsgroups.borland.com>
Organization: APS, Inc
Message-ID: <Xns92D176A1D472Bmikewteamb@207.105.83.65>
User-Agent: Xnews/5.04.25
NNTP-Posting-Host: 66.107.65.98
Date: 25 Nov 2002 08:39:41 -0800
X-Trace: newsgroups.borland.com 1038242381 66.107.65.98 (25 Nov 2002 08:39:41 -0800)
Lines: 17
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-05!sn-xit-01!sn-xit-08!supernews.com!newsfeed.news2me.com!border1.nntp.aus1.giganews.com!nntp.giganews.com!newsfeed1.cidera.com!Cidera!news.uni-x.net!newsgroups.borland.com!not-for-mail

Reply to Parent Message