[转载]Decompression of Run-time Compressed PE-files

信息来源：www2.fiit.stuba.sk

In this paper, we tackle the problem of compression and decompression of PE-files (portable executable file format in MSWindows). We analyze decompression methods used in the PE-file unpackers. Based on that, we design a new decompression method,which however uses standard decompression algorithms. Finally, we compare various standard decompression methods to our method and analyze and comment the results that we were able to achieve.