Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

need haxxing

Name: HaxMe !tly/rANUS. 2009-08-14 12:25

Give me some malware to dissect with my 1337 reverse-engineering skills.

Name: Anonymous 2009-08-14 12:56

>>3
Not OP, but here it goes:
ELF(LUNIX) library
3 exports:
imprime_edx
imprime_ecx
imprime_ebx
imprime_eax

they just print the registers. like this:
printf("eax %d 0x%x\n",&reg);
printf("ebx %d 0x%x\n",&reg);
printf("ecx %d 0x%x\n",&reg);
printf("edx %d 0x%x\n",&reg);
it was coded in assembly most likely, as the instruction used to save regs is pushad/popad, only braindead compilers use those.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List