St0rM
08-29-2011, 03:23 AM
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
rl]www.aljyyosh.com[/url]
olly debug codes
St0rM
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp äÞØÉ ÇáÇÏÎÇá
retn
--------------------------------------
push ebx
nopnop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp Entrypoint
retn
---------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
nop
retn
[/PHP]
----------------------------------------
push ebp
mov ebp,esp
add esp,-0C
push ebx
push esi
push edi
push ebx
push esi
mov esi,edx
mov ebx,eax
jmp 147.004010B0
retn
retn
----------------------------------------
pushad
nop
nop
nop
add ax,10
xor cl,cl
push 9
inc cl
xor bl,bl
push 8
inc bl
push 2
push -1
push
push
push
jmp äÞØÉ ÇáÇÏÎÇá ÇáÇÕáíÉ
-----------------------------------------
push ebp
mov ebp,esp
sub AX,5
sub AX,6
sub AX,7
sub AX,8
sub AX,9
sub AX,10
nop
nop
nop
jmp 004010B8
nop
nop
nop
retn
-----------------------------------------
mov esi,0AEDDAA
xor ah,ah
xor ah,ah
nop
nop
nop
nop
call entry point
retn
-----------------------------------------
push ebp
mov ebp,esp
push edi
mov edi,ecx
je short
push esi
push address
push dword
push 0C
push edi
call
je
push esi
call
pop ecx
mov eax,esi
pop esi
jmp shortcall
je short
push edi
pop ecx
mov eax,edi
pop edi
pop ebp
retn
-----------------------------------------
ADD AX,99
ADD AX,100
ADD AX,101
SUB AX,7
SUB AX,8
SUB AX,9
SUB AX,10
XOR AX,5
XOR AX,6
XOR AX,7
XOR AX,8
XOR AX,9
XOR AX,10
nop
nop
nop
nop
NOP
NOT AX
PUSHAD
ROR AX,4
NOP
NOP
CALL äÞØÉ ÇáÃÏÎÇá
RETN
-----------------------------------------
PUSH EDI
XOR ECX,ECX
MOV EAX,EDI
MOV EDX,4
MOV EDX,5
MOV EDX,6
MOV EDX,7
MOV EDX,8
MOV EDX,9
MOV EDX,10
MUL EDX
SETO CL
NEG ECX
CALL äÞØÉ ÇáÃÏÎÇá
ADD ESP,4
ADD ESP,5
ADD ESP,6
ADD ESP,7
ADD ESP,8
ADD ESP,9
ADD ESP,10
JE äÞØÉ ÈÏÇíÉ ÊØÈíÞ ÇáÃæÇãÑ
PUSH EBX
PUSH EBP
nop
-----------------------------------------
add ax,99
sub ax,7
sub ax,8
sub ax,9
sub ax,10
xor ax,5
xor ax,6
xor ax,7
xor ax,8
xor ax,9
xor ax,10
push 0
nop
not ax
pushad
ror ax,4
ror ax,5
ror ax,6
ror ax,7
ror ax,8
nop
call äÞØÉ ÇáÃÏÎÇá
pop edi
add esp,404
push ebx
retn
-----------------------------------------
retn
retn
push ebp < äÞØÉ ÇáÇÏÎÇá ÇáÌÏíÏÉ
mov ebp,esp
sub esp,8
push äÞØÉ ÇáÇÏÎÇá
push + ÇæÝíÓÊ Çæá retn
mov eax,ÇæÝÓÊ ËÇäí retn
jmp eax
nop
-----------------------------------------
ADD AX,99
SUB AX,7
XOR AX,5
NOP
NOT AX
PUSHAD
ROR AX,4
NOP
NOP
CALL äÞØå ÇáÇÏÎÇá
RETN
-----------------------------------------
PUSH EDI
XOR ECX,ECX
MOV EAX,EDI
MOV EDX,4
MUL EDX
SETO CL
NEG ECX
CALL äÞØå ÇáÇÏÎÇá
ADD ESP,4
JE äÞØå ÈÏÇíå ÇáÇæÇãÑ
PUSH EBX
PUSH EBP
nop
-----------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmpäÞØå ÇáÇÏÎÇá
retn
-----------------------------------------
push ebp
mov ebp,esp
xor edx,edx
mov ebp,10
mov ebp,ecx
movzx eax,al
nop
mov ecx,0
nop
nop
nop
nop
call entry point
retn
-----------------------------------------
push 4
dec edi
add ebx,eax
xor eax,4C11DB7
sub cl,ds:[ebx]
inc ebx
jmp äÞØå ÇáÇÏÎÇá
retn
-----------------------------------------
add ebx,4
nop
nop
nop
nop
nop
nop
add edi,28
xor eax,eax
mov eax,ds:[ebx]
jmpäÞØå ÇáÇÏÎÇá
retn
-----------------------------------------
PUSH EDI
XOR ECX,ECX
MOV EAX,EDI
MOV EDX,4
MUL EDX
SETO CL
NEG ECX
CALL äÞØÉ ÇáÃÏÎÇá
ADD ESP,4
JE äÞØÉ ÈÏÇíÉ ÊØÈíÞ ÇáÃæÇãÑ
PUSH EBX
PUSH EBP
nop
-----------------------------------------
ADD BYTE PTR DS:[EAX+50],AH
PUSH ESI
PUSH EDX
PUSH ECX
NEG EAX
NOT BL
PUSH 401214
CALL
XCHG DH,CH
PUSH 3781
PUSH 3764
PUSH 3768
PUSH 3772
PUSH 3732
CALL EAX
CALL ESI
CALL EBX
NOT EAX
XOR EAX,EDI
XOR CH,DH
INC ESI
DEC EBP
CALL ESP
JMP SHORTB
JLE SHORT
ROR AL,6
NOT EAX
PUSH EBP
RETN
-----------------------------------------
add ebx,4
nop
nop
nop
nop
nop
add edi,28
xor eax,eax
mov eax,ds:[ebx]
jmp ö~.004010B8
retn
-----------------------------------------
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp .004010B8
retn
-----------------------------------------
push 4
dec edi
add ebx,eax
xor eax,4C11DB7
sub cl,ds:[ebx]
inc ebx
jmp TT.004010B8
retn
-----------------------------------------
push 4
dec edi
add ebx,eax
xor eax,4C11DB7
sub cl,ds:[ebx]
inc ebx
jmp äÞØÉ ÇáÇÏÎÇá
retn
-----------------------------------------
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp äÞØÉ ÇáÇÏÎÇá
retn
-----------------------------------------
push ebp
mov ebp,esp
add esp,-0C
push ebx
push esi
push edi
push ebx
push esi
mov esi,edx
mov ebx,eax
jmp äÞØÉ ÇáÇÏÎÇá
retn
retn
-----------------------------------------
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp
retn
-----------------------------------------
push ebx
nopnop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp Entrypoint
retn
-----------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp
retn
-----------------------------------------
push ebx
mov ebp,esp
sbb ecx,ecx
sbb ecx,-1
jmp 00403fe8
retn
retn
-----------------------------------------
MOV EAX,DWORD PTR DS:[EDX+C]
MOV ECX,DWORD PTR DS:[EDX+18]
ROR EAX,CL
MOV EBX,745FFDFE
XOR EAX,EBX
SUB EAX,4
MOV DWORD PTR
SS:[EBP+92C28C9],EAX
MOV EBX,DWORD PTR DS:[EAX+4]
MOV EDI,EAX
-----------------------------------------
PUSH 78263845
PUSH 1
PUSH 0
PUSH 612D1CA4
PUSH E87F856E
PUSH 78263845
CALL 00408C9C
PUSH EDX
MOV EDX,ESP
PUSHAD
-----------------------------------------
pushad
push eax
push esi
push edx
push ecx
neg eax
not bl
push
call entry point
xchg dh,ch
push 3781
push 3764
push 3768
push 3772
push 3732
call eax
call esi
call ebx
not eax
xor eax,edi
xor ch,dh
inc esi
dec ebp
call esp
jmp short
jle short
ror al,6
not eax
push ebp
retn
-----------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp entry point
retn
rl]www.aljyyosh.com[/url]
olly debug codes
St0rM
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp äÞØÉ ÇáÇÏÎÇá
retn
--------------------------------------
push ebx
nopnop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp Entrypoint
retn
---------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
nop
retn
[/PHP]
----------------------------------------
push ebp
mov ebp,esp
add esp,-0C
push ebx
push esi
push edi
push ebx
push esi
mov esi,edx
mov ebx,eax
jmp 147.004010B0
retn
retn
----------------------------------------
pushad
nop
nop
nop
add ax,10
xor cl,cl
push 9
inc cl
xor bl,bl
push 8
inc bl
push 2
push -1
push
push
push
jmp äÞØÉ ÇáÇÏÎÇá ÇáÇÕáíÉ
-----------------------------------------
push ebp
mov ebp,esp
sub AX,5
sub AX,6
sub AX,7
sub AX,8
sub AX,9
sub AX,10
nop
nop
nop
jmp 004010B8
nop
nop
nop
retn
-----------------------------------------
mov esi,0AEDDAA
xor ah,ah
xor ah,ah
nop
nop
nop
nop
call entry point
retn
-----------------------------------------
push ebp
mov ebp,esp
push edi
mov edi,ecx
je short
push esi
push address
push dword
push 0C
push edi
call
je
push esi
call
pop ecx
mov eax,esi
pop esi
jmp shortcall
je short
push edi
pop ecx
mov eax,edi
pop edi
pop ebp
retn
-----------------------------------------
ADD AX,99
ADD AX,100
ADD AX,101
SUB AX,7
SUB AX,8
SUB AX,9
SUB AX,10
XOR AX,5
XOR AX,6
XOR AX,7
XOR AX,8
XOR AX,9
XOR AX,10
nop
nop
nop
nop
NOP
NOT AX
PUSHAD
ROR AX,4
NOP
NOP
CALL äÞØÉ ÇáÃÏÎÇá
RETN
-----------------------------------------
PUSH EDI
XOR ECX,ECX
MOV EAX,EDI
MOV EDX,4
MOV EDX,5
MOV EDX,6
MOV EDX,7
MOV EDX,8
MOV EDX,9
MOV EDX,10
MUL EDX
SETO CL
NEG ECX
CALL äÞØÉ ÇáÃÏÎÇá
ADD ESP,4
ADD ESP,5
ADD ESP,6
ADD ESP,7
ADD ESP,8
ADD ESP,9
ADD ESP,10
JE äÞØÉ ÈÏÇíÉ ÊØÈíÞ ÇáÃæÇãÑ
PUSH EBX
PUSH EBP
nop
-----------------------------------------
add ax,99
sub ax,7
sub ax,8
sub ax,9
sub ax,10
xor ax,5
xor ax,6
xor ax,7
xor ax,8
xor ax,9
xor ax,10
push 0
nop
not ax
pushad
ror ax,4
ror ax,5
ror ax,6
ror ax,7
ror ax,8
nop
call äÞØÉ ÇáÃÏÎÇá
pop edi
add esp,404
push ebx
retn
-----------------------------------------
retn
retn
push ebp < äÞØÉ ÇáÇÏÎÇá ÇáÌÏíÏÉ
mov ebp,esp
sub esp,8
push äÞØÉ ÇáÇÏÎÇá
push + ÇæÝíÓÊ Çæá retn
mov eax,ÇæÝÓÊ ËÇäí retn
jmp eax
nop
-----------------------------------------
ADD AX,99
SUB AX,7
XOR AX,5
NOP
NOT AX
PUSHAD
ROR AX,4
NOP
NOP
CALL äÞØå ÇáÇÏÎÇá
RETN
-----------------------------------------
PUSH EDI
XOR ECX,ECX
MOV EAX,EDI
MOV EDX,4
MUL EDX
SETO CL
NEG ECX
CALL äÞØå ÇáÇÏÎÇá
ADD ESP,4
JE äÞØå ÈÏÇíå ÇáÇæÇãÑ
PUSH EBX
PUSH EBP
nop
-----------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmpäÞØå ÇáÇÏÎÇá
retn
-----------------------------------------
push ebp
mov ebp,esp
xor edx,edx
mov ebp,10
mov ebp,ecx
movzx eax,al
nop
mov ecx,0
nop
nop
nop
nop
call entry point
retn
-----------------------------------------
push 4
dec edi
add ebx,eax
xor eax,4C11DB7
sub cl,ds:[ebx]
inc ebx
jmp äÞØå ÇáÇÏÎÇá
retn
-----------------------------------------
add ebx,4
nop
nop
nop
nop
nop
nop
add edi,28
xor eax,eax
mov eax,ds:[ebx]
jmpäÞØå ÇáÇÏÎÇá
retn
-----------------------------------------
PUSH EDI
XOR ECX,ECX
MOV EAX,EDI
MOV EDX,4
MUL EDX
SETO CL
NEG ECX
CALL äÞØÉ ÇáÃÏÎÇá
ADD ESP,4
JE äÞØÉ ÈÏÇíÉ ÊØÈíÞ ÇáÃæÇãÑ
PUSH EBX
PUSH EBP
nop
-----------------------------------------
ADD BYTE PTR DS:[EAX+50],AH
PUSH ESI
PUSH EDX
PUSH ECX
NEG EAX
NOT BL
PUSH 401214
CALL
XCHG DH,CH
PUSH 3781
PUSH 3764
PUSH 3768
PUSH 3772
PUSH 3732
CALL EAX
CALL ESI
CALL EBX
NOT EAX
XOR EAX,EDI
XOR CH,DH
INC ESI
DEC EBP
CALL ESP
JMP SHORTB
JLE SHORT
ROR AL,6
NOT EAX
PUSH EBP
RETN
-----------------------------------------
add ebx,4
nop
nop
nop
nop
nop
add edi,28
xor eax,eax
mov eax,ds:[ebx]
jmp ö~.004010B8
retn
-----------------------------------------
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp .004010B8
retn
-----------------------------------------
push 4
dec edi
add ebx,eax
xor eax,4C11DB7
sub cl,ds:[ebx]
inc ebx
jmp TT.004010B8
retn
-----------------------------------------
push 4
dec edi
add ebx,eax
xor eax,4C11DB7
sub cl,ds:[ebx]
inc ebx
jmp äÞØÉ ÇáÇÏÎÇá
retn
-----------------------------------------
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp äÞØÉ ÇáÇÏÎÇá
retn
-----------------------------------------
push ebp
mov ebp,esp
add esp,-0C
push ebx
push esi
push edi
push ebx
push esi
mov esi,edx
mov ebx,eax
jmp äÞØÉ ÇáÇÏÎÇá
retn
retn
-----------------------------------------
sub ecx,4
mov ebx,ecx
push dword ptr ss:[ebp+C]
cmp dword ptr ds:[esi],24
mov ss:[ebp-350],esi
lea ecx,ds:[ebx+28]
push dword ptr ss:[ebp+8]
add edx,1F
movzx dx,byte ptr ss:[ebp+1F]
jmp
retn
-----------------------------------------
push ebx
nopnop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp Entrypoint
retn
-----------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp
retn
-----------------------------------------
push ebx
mov ebp,esp
sbb ecx,ecx
sbb ecx,-1
jmp 00403fe8
retn
retn
-----------------------------------------
MOV EAX,DWORD PTR DS:[EDX+C]
MOV ECX,DWORD PTR DS:[EDX+18]
ROR EAX,CL
MOV EBX,745FFDFE
XOR EAX,EBX
SUB EAX,4
MOV DWORD PTR
SS:[EBP+92C28C9],EAX
MOV EBX,DWORD PTR DS:[EAX+4]
MOV EDI,EAX
-----------------------------------------
PUSH 78263845
PUSH 1
PUSH 0
PUSH 612D1CA4
PUSH E87F856E
PUSH 78263845
CALL 00408C9C
PUSH EDX
MOV EDX,ESP
PUSHAD
-----------------------------------------
pushad
push eax
push esi
push edx
push ecx
neg eax
not bl
push
call entry point
xchg dh,ch
push 3781
push 3764
push 3768
push 3772
push 3732
call eax
call esi
call ebx
not eax
xor eax,edi
xor ch,dh
inc esi
dec ebp
call esp
jmp short
jle short
ror al,6
not eax
push ebp
retn
-----------------------------------------
push ebx
nop
nop
inc dl
nop
mov al,dl
mov ah,3E
div cx
sub ax,99
nop
jmp entry point
retn