12.1 x86 12.1.1 OllyDbg 12.1.2 跟踪 12.1 x86 在x86指令集中,有一些独特的LOOP指令,它们会检查ECX中的值,如果它不是0的话,它会逐渐递减ECX的值(减一),然后把控制流传递给LOOP操作符提供的标签处。也许,这个指令并不是多方便,所以,我没有看到任何现代编译器自动使用它。如果你看到哪里的代码用了这个...
Seeking Open file Seeking at any position Seeking To move around the file we are inspecting we will need to change the offset at which we are using the s command. The argum...
Emulation Emulation in analysis loop Emulation One of the most important things to remember in reverse engineering is a core difference between static analysis and dynamic ana...