pe_xscan做了几个改动

原创

PurpleEndurer 2022-09-02 19:26:53 博主文章分类：pe_xscan ©著作权

文章标签 microsoft system windows application .net 文章分类 代码人生

©著作权归作者所有：来自51CTO博客作者PurpleEndurer的原创作品，请联系作者获取转载授权，否则将追究法律责任

1、整理优化了F2、O4、O23、O24组的检测代码

2、修改了生成的LOG中的O23项的显示，由：

O23 - 服务: porting (Microsoft Device Logical) - C:/WINDOWS/System32/svchost.exe -k "porting"|2008-4-13 19:14:14|Microsoft? Windows? Operating System|5.1.2600.5512|Generic Host Process for Win32 Services|? Microsoft Corporation. All rights reserved.|5.1.2600.5512 (xpsp.080413-2111)|Microsoft Corporation|?|svchost.exe|svchost.exe->C:/WINDOWS/system32/5b3185.dll|2009-6-11 11:26:22|Microsoft(R) Windows(R) Operating System|1, 0, 0, 1|.Net support application|Copyright (C) 2008|1, 0, 0, 1|Microsoft Corporation|?|Microsoft(R) Windows(R) Operating System|Server.exe(自动)

改为：

O23 - 服务: porting (Microsoft Device Logical) - C:/WINDOWS/System32/svchost.exe -k "porting" |2008-4-13 19:14:14|Microsoft? Windows? Operating System|5.1.2600.5512|Generic Host Process for Win32 Services|? Microsoft Corporation. All rights reserved.|5.1.2600.5512 (xpsp.080413-2111)|Microsoft Corporation|?|svchost.exe|svchost.exe
-> C:/WINDOWS/system32/5b3185.dll |2009-6-11 11:26:22|Microsoft(R) Windows(R) Operating System|1, 0, 0, 1|.Net support application|Copyright (C) 2008|1, 0, 0, 1|Microsoft Corporation|?|Microsoft(R) Windows(R) Operating System|Server.exe(自动)