blocks|key|3712818|text|是-一种常见的技术是将数据文件附加到可执行文件的末尾。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3712819|典型的方案是在可执行文件的末尾写入一个0x00000000整数，然后附加每个文件，后跟其大小(以字节为单位)。|3712820|然后，当可执行文件需要读取数据时，它检查自己文件中的最后4个字节，将其作为文件长度，并从它自己的文件中复制该字节数，然后检查下4个字节作为另一个长度，并将其复制为文件，直到长度为0000。如果您还需要对文件名进行编码-这会增加一些复杂性，但基本上是相同的想法。|3712821|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Yes - a common technique is to append data files at the end of an executable.

Typical scheme is to write a 0x00000000 integer to the end of the executable and then append each file followed by it's size in bytes.

Then when the executable needs to read the data it checks the last 4bytes in it's own file, uses that as the file length and copies that number of bytes form it's own file, it then checks the next 4 bytes as another length and copies that as a file , until it gets a length of 0000. If you also need to code the file names - that adds a little complexity but it's basically the same idea.

blocks|key|68354|text|您可以将TOC指针附加到EXE+(也可能是魔术ID+cookie)，以便验证它是否为TOC指针，然后使用该指针备份到每个附加记录的开头。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|68355|只要你没有弄乱文件的头和主要内容，它应该仍然可以被操作系统加载。|68356|然而，你牺牲了你的EXE的任何签名-而且你可能有各种各样的权限问题要处理……|68357|我已经为我的开发环境编写了工具，可以打开Windows+EXE，推断其中的资源，修改各种资源，并重新打包整个过程。我们使用它将测试版标记为发行版(因此它会修改版本记录)。|68358|如果你知道EXE文件的结构并正确地重建它，你可以对它做任何你想做的事情。|68359|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|M|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|N|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|O|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|P|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|K|$]]

You can append a TOC pointer to an EXE (and probably a magic ID cookie) so you can verify that it is a TOC pointer, and then use that to back up to the start of each appended record.

As long as you don't mess up the file's header &amp; main contents, it should still be loadable by the OS.

However, you sacrifice any signing your EXE had - and you probably have various permissions issues to contend with...

I have written tools for my development environment that opens a Windows EXE, extrapolates the resources in it, modifies various ones, and repackages the whole thing. We use this to mark a beta as release (so it modifies the version records).

You can do anything you want to an EXE file if you know the structure of it and rebuild it correctly.

blocks|key|5327612|text|由于这被标记为Windows，因此您还可以考虑“备用数据流”。这使您几乎可以将单个文件视为一个目录。您可以将名为Program.EXE:ExtraData的流添加到您的程序中，并使用常规的文件函数对其进行写入。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|5327613|话又说回来，您的可执行文件很可能是Program+Files\格式的，这对于普通(非提升)用户是不可写的。|5327614|entityMap^0|7|7|1K|L|0|H|E|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|R|8|@]|D|@]|E|$]]]|I|$]]

Since this is tagged as <code>Windows</code>, you might also consider "Alternate Data Streams". That allows you to treat a single file almost as a directory. You can add a stream called <code>Program.EXE:ExtraData</code> to your program and write to that with the normal file functions.

Then again, your executable most likely will be in <code>Program Files\</code>, which isn't writeable for normal (non-elevated) users.

blocks|key|1087950|text|如果你真正想问的是SmartUtils可移植存储是如何实现它的魔力的，那么我建议它是一个自动执行的压缩存档。归档文件EXE+(就像WinZip或7-Zip+create一样)自动从临时文件夹中提取并执行您的应用程序exe，并为您提供了一种可归结为提取、操作和修改原始的自动执行归档文件的方法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1087951|因此，Windows永远不会试图修改正在运行的.exe。相反，您的.exe+(提取并运行临时文件)是正在执行的(以及绑定到它的库)，它操作源.exe+(实际上是一个自动执行的归档-可能是.zip)。|1087952|下次用户“运行”修改后的"exe“时，您的.exe将再次被提取并运行，并且它可以再次操作自解压的.exe。|1087953|我希望这对你有意义。|1087954|这只是一个最好的猜测！|1087955|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|M|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|N|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|O|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|P|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|K|$]]

If all you're really asking is how SmartUtils Portable Storage does it's magic, then I would suggest that it is a self-executing zip archive. The EXE of the archive (just as WinZip or 7-Zip create) auto-extracts and executes your application exe from a temp folder, and gives you an API that boils down to ways to extract, manipulate, and then modify that original self-executing archive.

So Windows is never trying to modify a running .exe. Rather, your .exe (temp file extracted &amp; run) is what is executing (and the libraries bound to it), which manipulates the source .exe (really a self-executing archive - possibly .zip).

The next time the user "runs" the modified "exe", again your .exe is extracted &amp; run, and it can again manipulate the self-extracting .exe.

I hope that makes sense to you.

And this is just a best guess!

Is it possible to modify an executable file on runtime (I'm asking about Windows XP/Vista/7/Server)? I've just evaluated <a href="http://sutils.com/index.php/smartutils-portable-storage" rel="nofollow">SmartUtils Portable Storage application</a>. It can create so called "managed executable storage files" that modify them-self at runtime... Such storage file is like standard self-extracting archive (the data is apended to an executable module) but the main difference it that you are able to view and modify its content without the main program. How is it possible? I need similar functionality in my project (C++): I want to be able to create executable that can modify data attached to it.

Is it possible to modify an executable file on runtime?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

是否可以在运行时修改可执行文件(我问的是Windows XP/Vista/7/Server)？我刚刚评估了。它可以创建所谓的“托管可执行存储文件”，在运行时自行修改它们...这种存储文件类似于标准的自解压归档文件(数据被附加到一个可执行模块)，但主要的区别在于，您可以在没有主程序的情况下查看和修改其内容。这怎么可能呢？...

问是否可以在运行时修改可执行文件？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问是否可以在运行时修改可执行文件？EN