如何拆卸 VC++ 应用?
我相信该应用程序有一些部分是针对 .NET 的,而另一些部分则不是。 我特别有兴趣查看资源文件(如果有的话)。
I believe the application has some parts that target .NET, and some that don't. I'm particularly interested in looking at the resource files, if there are any.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(6)
为了补充 aku 的出色答案,对于说英语的人来说,IDA Pro 可以在 http://www.hex-rays 获取.com/。
To add to aku's excellent answer, for English speakers, IDA Pro is available at http://www.hex-rays.com/.
查看资源文件并不是真正的“反汇编”(不是真正的),如果这就是您想要做的,您只需在 Visual Studio 或类似工具中打开 .exe 或 .dll,它就会为您提供资源视图。
Looking at the resource files isn't really "disassembling" (not really) and if that's all you want to do you can just open the .exe or .dll inside Visual Studio or a similar tool and it will give you a resources view.
不要被价格吓到,免费软件版本(可从 hex-rays.com 获得)完全足以逆向 Win32 x86 代码。
Do not get scared by the prices, the freeware version (available from hex-rays.com) is perfectly sufficient for reversing Win32 x86 code.
如果您想查看汇编代码以及二进制文件是如何编译/链接的,我强烈推荐 IDA 进行逆向工程。
要简单地查看“内部”二进制文件(exe、dll、sys...),请尝试 CFF Explorer,它免费且非常棒:
http://www.ntcore.com/exsuite.php
您可以检查二进制文件结构非常详细,包括资源。
如果 CFF Explorer 还不够,那么尝试 PE Explorer,它的成本有点高:
http://www.heaventools.com/
I would too highly recommend IDA for reverse engineering if you want to see the assembly code and how the binaries have been compiled/linked.
To simpley see "inside" binary files (exe, dll, sys, ...) try CFF Explorer, its free and its great:
http://www.ntcore.com/exsuite.php
you can examine the binary files structure in great detail including resources.
If CFF Explorer is not enough then try PE Explorer which costs a little bit:
http://www.heaventools.com/
PE Explorer 绝对是最好的资源查看工具,但您可能想看看它的“仅资源”版本 - 资源调节器。
PE Explorer is definitely the best resource viewing tool, but you might want to have a look at its "resource-only" version - Resource Tuner.
如果你想反汇编本机x86/64应用程序,请使用IDA,.NET exe/dll可以使用Reflector反汇编。 有大量用于提取资源的实用程序。 你能详细说明一下你的问题吗?
If you want to disassemble native x86/64 app use IDA, .NET exe/dll can be disassembled using Reflector. There are tons of utilities to extract resources. Can you elaborate your question a bit?