Tasmһasmı+ԴbytecodeVMִС

ǰOllyMachineˣ﷨ͬOllyMachineOMİļ
http://www.luocong.com/om


˵
һдĳΪ˸OllyMachineõļԣ粻ԶѰַʽȣOllyDbg 2.0ٳٲʽ棬33ˣҪȵʲôʱ򰡣ԼҲȶalphaɡ


ȡOllyMachineǼʮѼǵļĴȡ֮ǿԶܹԶ255Ӧù˰ɣ
ֱʹãͬC﷨磺
mov i, 1

ע⣺ĳʼֵ0磺
mov i, j
ôijֵΪ0Ϊjĳʼֵ0Ȼֵi


Ѱַʽ˸Ľ֧֣
mov dword ptr [0x78787878], 0x12345678
mov word ptr[0x78787878], 0x1234
ȵȡ


ġķֵڱırtxУRTX: ReTurn X˼
磺
invoke malloc, 1000
mov buffer, rtx


塢ܻˣʣµǲAPIûʱ䲹ˡ
Ϊ˲ãҽдµAPIʹõ﷨MSDN
"printf",
"malloc",
"free",
"memset",
"fopen",
"fclose",
"fread",
"fwrite",
"fgetc",
"fputc",
"fseek",
"ftell",
"feof",
"rewind",
"PathFileExists",
"DeleteFile",
"RegOpenKeyEx",
"RegCloseKey",



- THE END -

޴
2010-12-27
