‫ﺗﻤﺮﯾﻦ ‪٣‬‬
‫ﻣﻮﻋﺪ ﺗﺤﻮﻳﻞ‪ :‬ﺟﻤﻌﻪ ‪ ۸۹/۱۰/۱۰‬ﺳﺎﻋﺖ ‪۲۴:۰۰‬‬
‫ﺑﺮﻧﺎﻣﻪﺍﯼ ﺑﻨﻮﻳﺴﻴﺪ ﮐﻪ ﺑﻪ ﻋﻨﻮﺍﻥ ﻭﺭﻭﺩﯼ ﻳـﮏ ﻓﺎﻳـﻞ ‪ (PE) EXE‬ﺑﮕﻴـﺮﺩ )‪ ،(In.EXE‬ﻭ ﺑـﻪ ﻋﻨـﻮﺍﻥ ﺧﺮﻭﺟـﯽ ﻳـﮏ ﻓﺎﻳـﻞ ‪ EXE‬ﺑﺪﻫـﺪ‬
‫)‪ .(Out.Exe‬ﻓﺎﻳﻞ ‪ Out.EXE‬ﻳﮏ ‪ section‬ﺍﺯ ﺟﻨﺲ ﺩﺍﺩﻩ ﺩﺍﺭﺩ‪ ،‬ﮐﻪ ﻣﺤﺘﻮﺍﯼ ﺁﻥ ﻓﺎﻳﻞ ‪ In.EXE‬ﺍﺳﺖ‪.‬‬
‫‪ Out.EXE‬ﺩﺭ ﺣﻘﻴﻘﺖ ﻳﮏ ‪ Loader‬ﺍﺳﺖ‪ ،‬ﮐﻪ ﮐﺎﺭﻫﺎﯼ ﺯﻳﺮ ﺭﺍ ﺍﻧﺠﺎﻡ ﻣﯽﺩﻫﺪ‪:‬‬
‫‪ (١‬ﺗﺨﺼﻴﺺ ﺻﻔﺤﻪﻫﺎﻳﯽ )‪ (page‬ﺍﺯ ﺣﺎﻓﻈﻪ ﻣﺘﻨﺎﺳـﺐ ﺑـﺎ ‪section‬ﻫـﺎﯼ ‪ ،In.EXE‬ﻭ ﺑـﺎﺭﮐﺮﺩﻥ ﻣﺤﺘـﻮﺍﯼ ﺍﻳـﻦ ‪ section‬ﻫـﺎ ﺩﺭ‬
‫ﺻﻔﺤﻪ ﻫﺎﯼ ﻣﺘﻨﺎﻇﺮ‪ .‬ﺑﺮﺍﯼ ﺍﻳﻦ ﻣﻨﻈﻮﺭ ﻣﯽﺗﻮﺍﻧﻴﺪ ﺍﺯ ‪API‬ﻫﺎﻳﯽ ﻧﻈﻴﺮ ‪ VirtualAlloc‬ﻳﺎ ‪ VirtualAllocEx‬ﺑﻬﺮﻩ ﺑﮕﻴﺮﻳﺪ‪ .‬ﺗﻮﺟّـﻪ‬
‫ﮐﻨﻴﺪ ﮐﻪ ﺻﻔﺖ ﺻﻔﺤﻪﻫﺎ ﺑﺎﻳﺪ ﻣﺘﻨﺎﺳﺐ ﺑﺎ ﺻﻔﺖ ‪ section‬ﻫﺎ )ﻓﻘﻂ ﺧﻮﺍﻧﺪﻧﯽ‪ ،‬ﺧﻮﺍﻧﺪﻧﯽ ﻧﻮﺷﺘﻨﯽ‪ ،‬ﮐﺪ‪ ،‬ﻭ ‪ (...‬ﺑﺎﺷﺪ‪.‬‬
‫‪ (٢‬ﺑﺎﺭﮔﺬﺍﺭﯼ ‪DLL‬ﻫﺎﯼ ﻣﻮﺭﺩ ﺍﺳﺘﻔﺎﺩﻩ ﺗﻮﺳﻂ ‪ In.EXE‬ﺩﺭ ﺣﺎﻓﻈﻪ‪ ،‬ﻭ ﺍﺻﻼﺡ ‪ import‬ﻫﺎ ﺩﺭ ‪ .IAT‬ﺑﺮﺍﯼ ﺍﻳﻦ ﻣﻨﻈﻮﺭ ﻣﯽﺗﻮﺍﻧﻴـﺪ‬
‫ﺍﺯ ‪API‬ﻫﺎﻳﯽ ﻧﻈﻴﺮ ‪ LoadLibraryEx ،LoadLibrary‬ﻭ ‪ GetProcAddress‬ﺑﻬﺮﻩ ﺑﮕﻴﺮﻳﺪ‪.‬‬
‫‪ (٣‬ﺍﻧﺠﺎﻡ ﻫﺮﮔﻮﻧﻪ ﻋﻤﻞ ﺩﻳﮕﺮ ﻣﻮﺭﺩ ﻧﻴﺎﺯ ﺑﺮﻧﺎﻣﻪ ﺑﺮﺍﯼ ﺍﺟﺮﺍ‪.‬‬
‫‪ (٤‬ﺍﺟﺮﺍﯼ ‪.In.EXE‬‬
‫ﻧﮑﺘﮥ ‪ :١‬ﺑﺮﻧﺎﻣﻪ ﺭﺍ ﺑﻪ ﺯﺑﺎﻥ ﺩﻟﺨﻮﺍﻩ ﺧﻮﺩ ﺑﻨﻮﻳﺴﺪ‪ .‬ﭘﻠﺘﻔﺮﻣﻬﺎﯼ ﻭﻳﻨﺪﻭﺯ ﻭ ﻟﻴﻨﻮﮐﺲ ﻣﻮﺭﺩ ﭘـﺬﻳﺮﺵ ﺍﺳـﺖ‪ .‬ﺑـﺮﺍﯼ ﺳـﺎﺩﮔﯽ ﮐـﺎﺭ ﺍﮐﻴـﺪًﺍ ﺗﻮﺻـﻴﻪ‬
‫ﻣﯽﺷﻮﺩ ﺑﺮﻧﺎﻣﻪ ﺭﺍ ﺑﺎ ﺯﺑﺎﻥ ‪) C‬ﺑﻪ ﻫﻤﺮﺍﻩ ‪ (Win32 SDK‬ﻳﺎ ﺯﺑﺎﻥ ﺍﺳﻤﺒﻠﯽ )ﺑﺎ ﺍﺳﺘﻔﺎﺩﻩ ﺍﺯ ‪ (MASM32‬ﺑﻨﻮﻳﺴﻴﺪ‪.‬‬
‫ﻧﮑﺘﮥ ‪ :٢‬ﻣﯽﺗﻮﺍﻧﻴﺪ ﺗﻤﺮﻳﻦ ﺭﺍ ﺩﺭ ﮔﺮﻭﻫﻬﺎﯼ ‪ ١‬ﺗﺎ ‪ ٥‬ﻧﻔﺮﻩ ﺍﻧﺠﺎﻡ ﺩﻫﻴﺪ‪.‬‬
‫ﻧﮑﺘﮥ ‪ :٣‬ﺑﻪ ﻫﻤﺮﺍﻩ ﻓﺎﻳﻞ ﺍﺟﺮﺍﻳﯽ‪ ،‬ﮐﺪ ﺳﻮﺭﺱ ﺭﺍ ﻧﻴﺰ ﺑﻔﺮﺳﺘﻴﺪ‪ .‬ﺩﺭ ﻳﮏ ﻓﺎﻳﻞ ‪ TXT‬ﻣﺸـﺨّﺺ ﮐﻨﻴـﺪ ﮐـﻪ ﭘﻠﺘﻔـﺮﻡ‪ ،‬ﺯﺑـﺎﻥ ﺑﺮﻧﺎﻣـﻪ ﻧﻮﻳﺴـﯽ‪ ،‬ﻭ‬
‫ﻣﺮﺍﺟﻌﯽ ﮐﻪ ﺍﺯ ﺁﻧﻬﺎ ﺍﺳﺘﻔﺎﺩﻩ ﮐﺮﺩﻩﺍﻳﺪ ﭼﻪ ﺑﻮﺩﻩﺍﻧﺪ‪ .‬ﻫﻤﭽﻨﻴﻦ ﻧﺎﻡ ﻭ ﺷﻤﺎﺭﮤ ﺩﺍﻧﺸﺠﻮﻳﯽ ﺗﻤﺎﻡ ﺍﻋﻀﺎﯼ ﮔﺮﻭﻩ ﺭﺍ ﺩﺭ ﺍﻳﻦ ﻓﺎﻳﻞ ﺑﻨﻮﻳﺴﻴﺪ‪.‬‬
‫ﻧﮑﺘﮥ ‪ :۴‬ﻓﻘﻂ ﻳﮏ ﻣﺮﺗﺒﻪ ﺗﻤﺮﻳﻦ ﺭﺍ ﺍﺭﺳﺎﻝ ﮐﻨﻴﺪ‪ .‬ﺗﻮﺟّﻪ ﺩﺍﺷﺘﻪ ﺑﺎﺷﻴﺪ ﮐﻪ ﺗﻨﻬﺎ ﻧﺨﺴﺘﻴﻦ ﺑﺎﺭ ﺍﺭﺳﺎﻝ ﺑﻪ ﻋﻨﻮﺍﻥ ﺗﻤﺮﻳﻦ ﺗﻠﻘﯽ ﻣﯽﺷﻮﺩ‪.‬‬
‫ﻧﮑﺘﮥ ‪ :۵‬ﻳﮑﯽ ﺍﺯ ﺍﻋﻀﺎﯼ ﮔﺮﻭﻩ ﺭﺍ ﺩﺭ ﻧﻈﺮ ﺑﮕﻴﺮﻳﺪ‪ .‬ﻓﺮﺽ ﮐﻨﻴﺪ ﺷﻤﺎﺭﮤ ﺩﺍﻧﺸﺠﻮﻳﯽ ﺍﻭ ‪ X‬ﺍﺳﺖ‪ .‬ﻫﻤﮥ ﻓﺎﻳﻠﻬﺎ ﺭﺍ ﺩﺭ ﭘﻮﺷﻪﺍﯼ ﺑﻪ ﻧﺎﻡ ‪ X‬ﺭﻳﺨﺘـﻪ‬
‫ﻭ ﭘﻮﺷــﻪ ﺭﺍ ﻓﺸــﺮﺩﻩ ﮐﻨﻴــﺪ )ﻣــﺜﻼً ‪ X.rar‬ﻳــﺎ ‪ .(X.tar.gz‬ﺳــﭙﺲ ﻓﺎﻳــﻞ ﻓﺸــﺮﺩﻩ ﺭﺍ ﺑــﻪ ﻣــﻦ ‪ email‬ﮐﻨﻴــﺪ‪ .‬ﺁﺩﺭﺱ ‪ email‬ﻣــﻦ ﺭﺍ ﺍﺯ‬
‫ﻼ ﺍﮔﺮ ﺷﻤﺎﺭﮤ ﺩﺍﻧﺸﺠﻮﻳﯽ ﺁﻥ ﻓﺮﺩ ‪۸۷۳۰۱۴۰۹‬‬
‫‪ http://ce.sharif.edu/~dousti‬ﺑﺮﺩﺍﺭﻳﺪ‪ ١.‬ﻋﻨﻮﺍﻥ ﺍﻳﻤﻴﻞ ﺷﻤﺎ ﺑﺎﻳﺪ ‪ [SSD]X‬ﺑﺎﺷﺪ‪ .‬ﻣﺜ ً‬
‫ﺍﺳﺖ‪ ،‬ﺍﻳﻤﻴﻠﯽ ﺑﺎ ﻋﻨﻮﺍﻥ ‪ [SSD]87301409‬ﺑﺰﻧﻴﺪ‪ ،‬ﻭ ﻓﺎﻳﻞ ‪ 87301409.rar‬ﺭﺍ ﺍﺭﺳﺎﻝ ﮐﻨﻴﺪ‪.‬‬
‫‪ ١‬ﺁﺩﺭﺱ ‪ email‬ﺭﺍ ﻣﺴﺘﻘﻴﻤﺎً ﻧﺪﺍﺩﻡ ﭼﻮﻥ ﻣﯽ ﺧﻮﺍﺳﺘﻢ ﺑﺎ ﻭﻳﮋﮔﯽ ‪ Mailhide‬ﺁﺷﻨﺎ ﺷﻮﻳﺪ‪ .‬ﻭﻟﯽ ﺍﮔﺮ ﻟﻴﻨﮏ ﻣﺴﺘﻘﻴﻢ ﺧﻮﺍﺳﺘﻴﺪ ﻣﯽﺗﻮﺍﻧﻴﺪ ﺑـﻪ ﻧـﺎﻡ ﮐـﺎﺭﺑﺮﯼ )‪(dousti‬‬
‫ﻣﻦ ﺩﺭ ‪ CE‬ﺍﻳﻤﻴﻞ ﺑﺰﻧﻴﺪ‪.‬‬