̳ᰮƽ⶯Ȩ2013 (C)

õĹ:peid
           od
           lordpe
           importREC

Scramblerο+ȥЧ UPX

PS:ûʲôֵôѧϰ ֻаѳĽδ øѧϰ лλʦ!

API:bp CreateFileA

ֱӿ

ODͷ ǷUPXͬ

..........................................................................
//ȫһ

00CE6BEF > $  90            nop 
00CE6BF0   >  61            popad
00CE6BF1   .  BE 0060C600   mov esi,Hiddukel.00C66000
00CE6BF6   .  8DBE 00B079FF lea edi,dword ptr ds:[esi-0x865000]
00CE6BFC   .  57            push edi
00CE6BFD   .  83CD FF       or ebp,-0x1
00CE6C00   .  EB 10         jmp short Hiddukel.00CE6C12
00CE6C02   .  EB 00         jmp short Hiddukel.00CE6C04
00CE6C04   >^ EB EA         jmp short Hiddukel.00CE6BF0
00CE6C06   .^ EB E8         jmp short Hiddukel.00CE6BF0

...........................................................................

ѿǵķкܶ ҪȥЧ ڴ淨һ ѧϰѿǷ̫̫

ѿǻҲ-_-

ǿһǻ۵İ취ȥЧ  Աȡ

ѿ޸ ҾͲˡ

򿪺͹ر 

Ա´С

δѿ:537,600ֽ

ѿ:9,351m168ֽ

ڿһOD Ա ʧ

ALT+F9  Ա

0041C08F    3D B8350800     cmp eax,0x835B8 ʮ=δѿǵļС

޸ķкܶ jg=jl ޸IF ޸ļС 

3D0900

2ַʵȥ˳Ч ļСԱ

˼·λʦҲԽ.

bye




