PE

想自己做个壳，所以重新又看了下 PE 格式，参考资料：

Inject your code to a Portable Executable file

http://www.codeproject.com/KB/system/inject2exe.aspx?msg=3647949

国内也早有人翻译了：

http://www.baidu.com/s?wd=%B0%D1%C4%E3%B5%C4%B4%FA%C2%EB%D7%A2%C8%EBPE%CE%C4%BC%FE&pn=0&tn=monline_dg

此篇原文已经被删除：

http://www.pediy.com/kssd/pediy08/pediy8-756.htm

Peering Inside the PE: A Tour of the Win32 Portable Executable File Format

http://msdn.microsoft.com/zh-cn/magazine/ms809762%28en-us%29.aspx

LZO real-time data compression library, Markus F.X.J. Oberhumer.

http://upx.sourceforge.net/