PBL(PBD) File Format - chengg0769 来自四川，在东莞虚度十载 - 博客频道 - CSDN.NET chengg0769 来自四川，在东莞虚度十载 PB反编译_Powerbuilder DeCompiler_PB反编译器_PB混淆器_PB加密 目录视图 摘要视图 订阅 新年新气象------CSDN2014新版导航就要跟大家见面了 2014年1月微软MVP当选名单揭晓！ 消灭0回答，赢下载分 “我的2013”年度征文活动火爆进行中！ 专访何海涛：“不正经”程序员的进阶之路 PBL(PBD) File Format 2009-02-26 02:07 1463人阅读 评论(0) 收藏 举报 filepowerbuilderintegerstringlibraryheader http://www.dwox.com/PBL_File_Format.txt+--------------------------------------------------------------+I PBL File Format 2003 - 2010 I+--------------------------------------------------------------+Dear PB Fans out there, these are the results of the analysis I did, written down asa short ASCII text description (valid thru PB5-11.5). With this knowledge you can write your own LibraryDirectoryor Export Function for PowerBuilder PBL/PBD/DLL/EXE files. Think about the possibility; including files via PBR assignmentand extracting them during runtime. That is a nice gimmick. Most of the terms used are the results and presumptions of my analysis. Thanks to: - Kevin Cai for Bytes 17-18 of the Node-Block - Jeremy Lakeman for Bytes 19-20, 23-24 of the Node-Block Regards Arnd Schmidt May 2010 arnd.schmidt@dwox.com +--------------------------------------------------------------+I PBL File Format I+--------------------------------------------------------------+ Rules and facts: 1.) A PBL is always made out of blocks of 512, except the Node Block (NOD*), that has a size of 6 blocks, meaning 3072 Bytes. 2.) There is always one Header (HDR*) block, followed by a free/used blocks bitmap (FRE*). Then follows the first 'NOD*' block . Theoretically this first 'NOD*' block might(!) point to a parent node, but I have never seen that. 3.) Object Data (also SCC Informations) are always stored in single forward linked/chained of 'DAT*'-Blocks. The information about the offset and the length is stored in the Header (HDR*). 4.) A PBD is a PBL. 5.) DLL and EXE files have a 'TRL*' at the end of the file. This is pointing to the one and only 'HDR*'-Block.Attention: For signed DLLs (like PowerBuilder's signed DLLs in Version 11.5)you have to recalculate the offset to the 'TRL*' Block. +--------------------------------------------------------------+I Library Header Block (512 Byte) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'HDR*' II 5 - 18 I String I 'PowerBuilder' + 0x00 + 0x00 II 19 - 22 I Char(4) I PBL Format Version? (0400/0500/0600)II 23 - 26 I Long I Creation/Optimization Datetime II 29 - ff I String I Library Comment II 285 - 288 I Long I Offset of first SCC data block II 289 - 292 I Long I Size (Net size of SCC data) I+-----------+------------+-------------------------------------+ +--------------------------------------------------------------+I Library Header Block - Unicode (1024 Byte) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'HDR*' II 5 - 32 I StringW I 'PowerBuilder' + 0x00 + 0x00 II 33 - 40 I CharW(4) I PBL Format Version? (0400/0500/0600)II 41 - 44 I Long I Creation/Optimization Datetime II 45 - ff I StringW I Library Comment II 559 - 562 I Long I Offset of first SCC data block II 563 - 566 I Long I Size (Net size of SCC data) I+-----------+------------+-------------------------------------+ +--------------------------------------------------------------+I Bitmap Block (512 Byte) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'FRE*' II 5 - 8 I Long I Offset of next block or 0 II 9 - 512 I Bit(504) I Bitmap, each Bit represents a block I+-----------+------------+-------------------------------------+(512 - 8) * 8 = 4032 Blocks are referenced +--------------------------------------------------------------+I Node Block (3072 Byte) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'NOD*' II 5 - 8 I Long I Offset of next (left ) block or 0 II 9 - 12 I Long I Offset of parent block or 0 II 13 - 16 I Long I Offset of next (right) block or 0 II 17 - 18 I Integer I Space left in block, initial = 3040 II 19 - 20 I Integer I Position of alphabetically II I I first Objectname in this block II 21 - 22 I Integer I Count of entries in that node II 23 - 24 I Integer I Position of alphabetically II I I last Objectname in this block II 33 - ff I Chunks I 'ENT*'-Chunks I+-----------+------------+-------------------------------------+ +--------------------------------------------------------------+I Entry Chunk (Variable Length) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'ENT*' II 5 - 8 I Char(4) I PBL version? (0400/0500/0600) II 9 - 12 I Long I Offset of first data block II 13 - 16 I Long I Objectsize (Net size of data) II 17 - 20 I Long I Unix datetime II 21 - 22 I Integer I Length of Comment II 23 - 24 I Integer I Length of Objectname II 25 - ff I String I Objectname I+-----------+------------+-------------------------------------+ +--------------------------------------------------------------+I Entry Chunk - Unicode (Variable Length) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'ENT*' II 5 - 12 I CharW(4) I PBL version? (0400/0500/0600) II 13 - 16 I Long I Offset of first data block II 17 - 20 I Long I Objectsize (Net size of data) II 21 - 24 I Long I Unix datetime II 25 - 26 I Integer I Length of Comment II 27 - 28 I Integer I Length of Objectname II 29 - ff I StringW I Objectname I+-----------+------------+-------------------------------------+ +--------------------------------------------------------------+I Data Block (512 Byte) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'DAT*' II 5 - 8 I Long I Offset of next data block or 0 II 9 - 10 I Integer I Length of data in block II 11 - XXX I Blob{} I Data (maximum Length is 502 I+-----------+------------+-------------------------------------+ +--------------------------------------------------------------+I Trailer Block (in DLL/EXE) always last block (512 Byte) I+-----------+------------+-------------------------------------+I Pos. I Type I Information I+-----------+------------+-------------------------------------+I 1 - 4 I Char(4) I 'TRL*' II 5 - 8 I Long I Offset of Library Header ('HDR*') I+-----------+------------+-------------------------------------+ +--------------------------------------------------------------+I SCC DATA II Structure of status information chunks II in DAT*-blocks (Variable Length) I+---------+----------------------------------------------------II Type I Information I+---------+----------------------------------------------------II String I Libraryname (the opposite!) II String I Objectname II String I Developername II Char(1) I Flag I+---------+----------------------------------------------------I +--------------------------------------------------------------+I PB6/7 Status Flags I+------+------+------------------------------------------------+I Icon I Flag I Meaning I+------+------+------------------------------------------------+I I r I Object is registered II I d I Object is Checked Out (locked) II I s I Object (Working Copy) to be checked in II I u I Unknown?! After an Error occurred. II I I (Checked out by user <Unknown> II I I Could be set to 'r' with an Hex-Editor.) I+------+------+------------------------------------------------+ +--------------------------------------------------------------+I SCC DATA chunk II In newer PB Versions the DAT*-blocks content starts with the II ansi-encoded String 'SCC*'. II Objectname and Version Informations are stored as II 0-Byte (Word) separated strings. I+----------+---------------------------------------------------II Type I Information I+----------+------------+--------------------------------------+I 1 - 4 I Char(4) I 'SCC*' II 5 - xxx I Blob I Objectname (string) followed by II I I Null-Byte 0x00 (Word in Unicode) II I I indicating the string end II I I Version (String) followed by II I I Null-Byte 0x00 (Word in Unicode) II I I indicating the string end II I I Next Objectname und Versioninfo II I I repeatedly until the end I+----------+------------+--------------------------------------+ DateTimes are stored in Long format in Unix representation.Timezone is always GMT (+/- 0:00), so the datetime has to beconverted to LocalDateTime via LocalTimeZone conversation. In the compiled object data blocks, there are at least 2 more datetimes, starting at byte 23 and the other one at 27!Looks like these are the modification and regeneration date... 更多 上一篇：软件公司的产品化之路 定制开发将逐渐淡出[转] 下一篇：行业软件开发中的项目管理[转] 查看评论 * 以上用户言论只代表其个人观点，不代表CSDN网站的观点或立场 核心技术类目 全部主题 Java VPN Android iOS ERP IE10 Eclipse CRM JavaScript Ubuntu NFC WAP jQuery 数据库 BI HTML5 Spring Apache Hadoop .NET API HTML SDK IIS Fedora XML LBS Unity Splashtop UML components Windows Mobile Rails QEMU KDE Cassandra CloudStack FTC coremail OPhone CouchBase 云计算 iOS6 Rackspace Web App SpringSide Maemo Compuware 大数据 aptech Perl Tornado Ruby Hibernate ThinkPHP Spark HBase Pure Solr Angular Cloud Foundry Redis Scala Django Bootstrap 个人资料 chengg0769 访问：515758次 积分：8551分 排名：第420名 原创：267篇 转载：211篇 译文：0篇 评论：348条 文章搜索 文章分类 PB反编译与加密(12) IOS和安卓(9) PB与数据库(9) 网络相关(1) 搜索相关(0) 闲话扯起耍(1) 其他语言(4) 文章存档 2013年12月(2)2013年11月(2)2013年09月(1)2013年02月(1)2012年11月(1)2012年09月(1)2012年08月(6)2012年07月(1)2012年05月(3)2012年03月(4)2011年12月(2)2011年11月(2)2011年10月(9)2011年09月(6)2011年08月(11)2011年07月(2)2011年06月(4)2011年04月(3)2010年12月(1)2010年10月(2)2010年09月(8)2010年08月(1)2010年07月(8)2010年06月(17)2010年05月(2)2010年04月(2)2010年03月(4)2010年01月(1)2009年09月(8)2009年08月(5)2009年07月(8)2009年06月(8)2009年05月(16)2009年03月(2)2009年02月(7)2008年12月(2)2008年11月(4)2008年10月(5)2008年08月(1)2008年07月(2)2008年01月(12)2007年12月(29)2007年11月(7)2007年10月(4)2007年09月(20)2007年08月(55)2007年07月(176) 阅读排行 搜索引擎学习资源(作者：dongdonglang)(14656) 做代理网站最有效的4种宣传方法(admin9.com)(12007) 再谈powerbuilder程序防止破解的办法(终结篇,以后不再写这个问题)(8066) 程序员的SEO总结(7459) 浅谈Powerbuilder的未来和Powerbuilder使用者的未来(5999) 在一台联想3000G430 T1600笔记本上安装黑苹果(东皇v10.6.3)成功(5948) PowerBuilder DeCompiler(PB DeCompiler) Demo download(PB反编译，支持5-12)(5887) PB11.5,PB12 web项目初探(5635) 文件夹加密原理 [转](5627) powerbuilder反编译器开发-第一步：pbd结构分析和pbkiller分析(5473) 评论排行 浅谈Powerbuilder的未来和Powerbuilder使用者的未来(49) 程序员的SEO总结(32) 有关Powerbuilder的悲观论和乐观论(由郭贴引发的300多贴争辩想到的，也是很久就想秉明的一个观点)(22) Powerbuilder混淆,加密(powerbuilder防止反编译,pb混淆器，PB加壳，支持5-12) obfuscator for PowerBuilder(20) 戏说DataWindow的“移植”和“临摹”(19) 因为垄断形成，数据库市场将出现更多开源数据库(19) 免费软件模式之随想(18) 软件提交到国外的下载站的几点操作和想法(15) PB11.5,PB12 web项目初探(15) 关于对pbd反编译器的期待(11) 推荐文章 最新评论 安装两个BCB6控件SynEdit、mwEdit 0.92a的过程总结 jiduxiaozhang12345: 请问BCB6的第三方控件在哪下载啊？急求 Powershield一个疑似的BUG zhj149: 高手啊，看你的文章，感觉你玩pb已经到了极致的境界了，我自认为pb还不错，和你比起来，还是差了太多了 软件提交到国外的下载站的几点操作和想法 u012353953: 楼主在吗？有个问题请教，看到请加我QQ，谢谢。17493589 Lucene(Nutch)距离商业文本搜索引擎还有多远？(转载) koubi1986: 你好！请教一些问题：请问一下1。你是如何把nutch抓取到的二进制内容，在项目中读取的。2。nutc... 看一个商业共享软件是如何在下载站刷下载量来作弊的！ u011506701: 您的判断是有误的，像我研究的刷量算法你就根本看不出来，出现的曲线图跟正常的一模一样的，附：刷量是最好... 垂直搜索引擎蜘蛛的基本解决方案(编程实例：所以推荐) gis101989: 你好，我正在写面向主题搜索引擎结合地理信息的论文，很多地方不懂，能加个扣扣吗？非常感谢你的帮助，我的... 浅谈Powerbuilder的未来和Powerbuilder使用者的未来 hosthelp: PB的最大缺点就是：（其实很简单）过时了。 服装过时就没人穿了， 电器过时就没人买了， 明星过时（过... 三岁小孩开发搜索引擎，搜索引擎白热化[原创] rongzi1987: 顶一个。先顶再看 再谈powerbuilder程序防止破解的办法(终结篇,以后不再写这个问题) hua2000: 顶顶更健康正在研究反向工程 有个傻B说破解了我的软件—哈哈！黄金屋手机MP3.MP4.3GP.电影.下载系统 ljx811216: 真有这事，看看 我的未来方向 pconline/asp.net周金桥老师的aspnet 友人Blog 旧博客在sina Bluesen的语音卡开发平台 JackXu的开源语音卡框架 经验丰富的好友:杨光的专栏 蓝星际语音平台,Koodoo语言 Lucene改造者-yuetiantian 西部.阿呆's blog manesking:全文检索c/c fullfocus研究lucene,nutch 黄国酬的博客 把“天轰穿”的asp.net 雨松.安卓