Flag: Tornado!
Hurricane!
|
|
| MEW 11 SE v1.1 |
Northfox |
Compressor |
saphex |
January 10 2008 |
|
| PE header |
no |
no |
__u_____, MEW |
N/A
|
|
|
Simple compressor that uses LZMA compression, can strip relocs. It does a return with the oep in the stack to transfer execution flow.
|
|
00000000 56 push edi
00000001 AD lodsd
00000002 0F C8 bswap eax
00000004 ; ...
0000000E 50 push eax
0000000F 55 push ebp
00000010 FF 53 ?? call dword ptr [ebx-value]
00000011 AB stosd
00000012 75 E7 jnz 00000000
00000013 C3 retn |
|
|
00000000 E9 ?? ?? ?? ?? jmp value
00000005 00
00000006 00
00000007 00
00000008 02
00000009 00
0000000A 00
0000000B 00
0000000C 0C
0000000D 80 |
|
|
|
|
|
|
|
There are 28,220 total registered users.
|
|
![[+] expand](/imagery/files/soysauce_blueprint.gif){kind=link}