Re: x86 VM
Hold it!
If you go into DEBUG and use the 'A' command(rest assured, debug is NOT my
assembler), type 'JMP NEAR 100' and press enter twice, then use the 'U'
command, you get something like this:
20B4:0100 E9FDFF JMP 0100
20B4:0103 F8 CLC
20B4:0104 1910 SBB [BX+SI],DX
20B4:0106 4F DEC DI
20B4:0107 0E PUSH CS
20B4:0108 0000 ADD [BX+SI],AL
20B4:010A 10EF ADC BH,CH
20B4:010C 00F0 ADD AL,DH
20B4:010E 46 INC SI
20B4:010F 32B210B2 XOR DH,[BP+SI+B210]
20B4:0113 034F0E ADD CX,[BX+0E]
20B4:0116 2D2F00 SUB AX,002F
20B4:0119 FD STD
20B4:011A 46 INC SI
20B4:011B 36 SS:
20B4:011C 99 CWD
20B4:011D 00A3201E ADD [BP+DI+1E20],AH
If JMP NEAR executes like you did, this would jumo ti 20B4:FDFF instead of
20B4:100.
|
Not Categorized, Please Help
|
|