最初由 playar 发布
做了一个给editplus用的语法着色文件
附件:oms.rar[/URL]附件:oms.rar

not cf
mov zf, 0
mov pf, 1

HMODULE hOMDll;
typedef void (__cdecl *RUNOMFILE)(const char *);
RUNOMFILE RunOMFile;

hOMDll = GetModuleHandle("OllyMachine.dll");
// Check that the other plugin is present and loaded
if (hOMDll)
{
// Get address of exported function
RunOMFile = (RUNOMFILE)GetProcAddress(hOMDll, "RunOMFile");
// Check that the other plugin exports the correct function
if (RunOMFile)
{
RunOMFile("test.oms"); // Execute script
RunOMFile("test.omb"); // Execute binary
}
}

invoke WriteMemHexes, eip, "e800000000"

// Read the file into the memory
// reg01 = memory starting address
// reg02 = filesize
invoke ReadFileIntoMem, "test.exe", indexof reg01, indexof reg02

// Print the file contents byte by byte
mov reg10, reg01
read_file_contents:
invoke ReadMemLong, reg10, 1
invoke PrintNum, reg00, 16
inc reg10
dec reg02
cmp reg02, 0
jne read_file_contents

// Remember to free the memory!!!
invoke VirtualFreeEx, indexof reg01

最初由 昨天 发布


呵呵，老罗的好东东要支持一下，送上CHM格式的帮助文件附件:OLLYMACHINE 帮助.rar:D