1. Reverse of. Net Program: reflector7
2. Modify the resource file: PE. Explorer exists
3. QT string modification: qtlinguist
4. File monitoring: Filemon
5. Registry monitoring: regmon
Undo the installation package:
Universal extractor: a program that can extract files from any type of archive files, whether it is a simple ZIP file, Installer (such as wise or NSIs), or Windows Installer (. MSI) package.
Zipscan: it is a set of software specially designed to find the data in ZIP files. When you have it, you can quickly find the data you have backed up before compression, with zipscan's search capability, you can not only find the files you need, but also display the file size before compression, this powerful function makes up for the shortcomings in WinZip and Windows systems that cannot search ZIP files. In addition to searching for ZIP files, zipscan can also search for files in the cab compression format, which is quite convenient.
Iscab: InstallShield cab File Viewer
Winpack, allows you to unpack the installation programs created in installshield3.0, 5.0, and 6.0, replace, add, and delete files in the package, and perform other operations. Note: is 6.0 (InstallShield) is valid
**************************************** ********
Iscab: InstallShield cab File Viewer
1. Column files
D: \ 12> iscab.exe .. \ Setup \ data1.cab-l-I "1.ini"
List the files in data1.cab to file 1. ini.
2. delete an object
In the 1. ini file, only the content to be deleted is retained, and then run the command"C:\Cab Folder\Data1.cab" -i"C:\Cab Folder\ISCab.ini" -r
3. Add
4. Modify
5. Extract
Reference: http://hi.baidu.com/myzbcn/blog/item/a7646cd1116c88d8562c8436.html
1. List objects
Use c: \ cab Folder \ iscab. ini to list files in c: \ cab Folder \ data1.cab. Run the following command:
Copy content to clipboard
Code:
ISCab "C:\Cab Folder\Data1.cab" -i"C:\Cab Folder\ISCab.ini" –l
In this example, the content of the generated iscab. ini file is as follows:
Copy content to clipboard
Code:
[ISCAB Info]
Product=ISCAB
Version=2.0
[Program Executable Files]
File1="Main EXEs\MyApp.exe"
File2="Main DLLs\Functions.dll"
File3="Main DLLs\Resources.dll"
File4="Utility EXEs\Util.exe"
File5="Utility DLLs\UtilFunc.dll"
File6="Utility DLLs\UtilRes.dll"
[Help Files]
File1="MyApp.hlp"
File2="MyApp.cnt"
2. delete an object
If you want to delete the functions. dll and utilfunc. DLL files, you can delete other contents from the iscab. ini file and only keep the following information:
Copy content to clipboard
Code:
[ISCAB Info]
Product=ISCAB
Version=2.0
[Program Executable Files]
File2="Main DLLs\Functions.dll"
File5="Utility DLLs\UtilFunc.dll"
Note that the key value in the iscab. ini file does not need to start from file1, but is based on the original number.
To start deletion, run the following command:
Copy content to clipboard
Code:
ISCab "C:\Cab Folder\Data1.cab" -i"C:\Cab Folder\ISCab.ini" -r
If you execute the following command (display the file list ):
Copy content to clipboard
Code:
ISCab "C:\Cab Folder\Data1.cab" -i"C:\Cab Folder\ISCab.ini" -l
The content of the generated iscab. ini file is changed:
Copy content to clipboard
Code:
[ISCAB Info]
Product=ISCAB
Version=2.0
[Program Executable Files]
File1="Main EXEs\MyApp.exe"
File2="Main DLLs\Resources.dll"
File3="Utility EXEs\Util.exe"
File4="Utility DLLs\UtilRes.dll"
[Help Files]
File1="MyApp.hlp"
File2="MyApp.cnt"
3. Add and replace files
To perform the following operations:
Use c: \ updated \ resources. DLL to replace resources. dll.
Replace utilres. dll with c: \ updated \ utilres. dll.
Add c: \ new \ util. HLP and c: \ new \ util. CNT to the help files file group.
Delete the information about the file in iscab. ini and edit the following content:
Copy content to clipboard
Code:
[ISCAB Info]
Product=ISCAB
Version=2.0
[Program Executable Files]
File2="Main DLLs\Resources.dll" , "C:\Updated\Resources.dll"
File4="Utility DLLs\UtilRes.dll" , "C:\Updated\UtilRes.dll"
[Help Files]
File1="Util.hlp" , "C:\New\"
File2="Util.cnt" , "C:\New\"
Run the following command to add and replace a file:
Copy content to clipboard
Code:
ISCab "C:\Cab Folder\Data1.cab" -i"C:\Cab Folder\ISCab.ini" -a
If you execute the following command (display the file list ):
Copy content to clipboard
Code:
ISCab "C:\Cab Folder\Data1.cab" -i"C:\Cab Folder\ISCab.ini" -l
The content of the generated iscab. ini file is changed:
Copy content to clipboard
Code:
[ISCAB Info]
Product=ISCAB
Version=2.0
[Program Executable Files]
File1="Main EXEs\MyApp.exe"
File2="Main DLLs\Resources.dll"
File3="Utility EXEs\Util.exe"
File4="Utility DLLs\UtilRes.dll"
[Help Files]
File1="MyApp.hlp"
File2="MyApp.cnt"
File3="Util.hlp"
File4="Util.cnt"
4. decompress the file
If you want to perform the following operations:
Decompress myapp.exe to c: \ extracted \ main exes \ myapp.exe
Decompress util.exe to c: \ extracted \ oldutil.exe
Delete the information about the file in iscab. ini and edit the following content:
Copy content to clipboard
Code:
[ISCAB Info]
Product=ISCAB
Version=2.0
[Program Executable Files]
File1="Main EXEs\MyApp.exe" , "C:\Extracted\"
File3="Utility EXEs\Util.exe" , "C:\Extracted\OldUtil.exe"
To decompress the file, run the following command:
Copy content to clipboard
Code:
ISCab "C:\Cab Folder\Data1.cab" -i"C:\Cab Folder\ISCab.ini" -x