Ѳ֮File Format Identifier v1.4

    һвĹߣļʽʶܣʹóѲĸʽʶ棬ǡѿǡPEļ༭PEļؽץȡ(ĳЩܵ)ڴ鿴/DUMPݴļַתPEID֧֡MD5ԼݵĵõȹܣʺϲжһЩľϵͳ

    ƷΪûԷҵԵءװƺɢƷҪҵԵۡƺɢ練˾ľDSWLABȨɣҵ˾ŶʹñDSWLABȨɡ
    
    V1.4ܣ
    
    ԶȡܣùʹִмеĻȡ߱ԶܹܣɻȡImportREC޷ȷȡĵ(ھ)Ըùи뷨˻ӭϵǡ

    ӵĸϸPEļиϸµĽԴļ/ЧPEļ/޷ִеPEļԭ򡣸лPedro Lopez˹ܡ
    
    ƤܣʹýƯлԼϲƤ񡣸лfly(unpack.cn)˹ܡ
    
    չǩ⼯Flyռǩ⡣лfly(unpack.cn)Ȩ
    
    BUG           
    
    V1.3ܣ
    
    ӽ̲鿴ֹܣ֧dumpʽ:Dump FullDump PartialDump Region֧Զģڴ澵С(ڰ)
    
    V1.2ܣ

    ȫ֧PEIDܡʹǰҪָLoad PluginsͿʹPEidĲܣFFIpluginsĿ¼£úúPlugin>>ͿɿӦ

    ֧ؽPEĹܣ޸𻵵PEļѿǺļ޷¼ӿǵ
    
    
    V1.1ܣ
    
    ʹVMUnpackerѿѿǵĹܣʶĿǿֱӵUnpackťѵӿľ汾ѿѿͬVMUnpacker V1.4 
    
    ӶԸݵĴɽֱɾ߱Ϊļһ
    
    PEļĵַתܣɷĻRAV<->RAW 
    
ϸ˵£
    
һǹܣ

    ֧ļקĿ¼קҼļĿ¼ĲǹܣFFIԴǿunpack.avd⣬ʹչǿ(Ϊuserdb.txt˿ʽPEIDʽ԰Լռuserdb.txtǿǼ⹦)
    
   
    עʹչĿǣڿϢ * ־
    
ѿǹܣ

   ڲǺUnpackťãʾԶԵǰļѿǴѿǼصĵǰļΣϵͳ

    
PE༭ܣ

   ʾĳڵ/ڵƫƣεϢṩǿı༭ܡ

   PE SectionťԱ༭ǰļĽڱSections Editorڡ
   
   ҪУ
   
       ʾϸĽڶϢ
       ɲ鿴༭ơСִԵϢ
       ѡ
       νԶ޸
       Ӵ̼
       ﱣε
       һµ
       ļɾ
       PEͷɾ(ʵʻ)
       ָ
       
   SubSystemťʾPEļϸϢ֧ϸ༭PEļDosͷNTͷϢֲ֧鿴PEļĵϢĿ̫ϸ¾ο档
   
ġݼ⣺

    ɨӦóǷݣṩ˸ϸʼλúʹСDel OverlayťSave OverlayťӦĴ

塢֧PEid

    OptionsťѡLoad PluginsͿʹPEidĲܣFFIpluginsĿ¼£ȻPlugin>>ͿɿӦϢ
 
ReBuild PE ܣ

    ҪѿǺPEļ޸һѿǺ޷¼ӿǵ⣬ʹReguildPEťɴ˹ܡ   
   
ߡ֧֣

   OptionsťУManage ToolsťҼ˵/ɾIDA/OllyDBGȵߣͿֱFFIOllyDBGIDAЩ򿪵ǰļзࡣ
   
   עӵߺ󣬵Plugin>>ťͿԿӵĹϢˣô˹ߴ򿪵ǰļ
   
   
ˡDUMP

   TaskViewť󣬿Խн̵ֹģڴdumpĿǰ֧dumpʽ:Dump FullDump PartialDump Region֧Զģڴ澵С
   
šץȡ

   Get IATťѡ̺ͿץȡDumpFixerǰȷOEPϢ
   
   ֲʶĺϢܲڵϢҼVM DecodeԽ
   
   ץȡĵϢЩҪģڵϢҼDel ThunkCut Thunkʧ
   
   ҪԽ̵ķģץȡManipulation recordsжӦģϢҼLoad this moduleץȡĵģˡ

ʮϵǣ

   ʲô⣬ʲô飬Ҫ¹ܣͨEmail to usʼǣΪǰļǸĽFFIܻbug棬Ҳ԰͸ǡ
   
   
    
Ѳײɱľȫ汣ϵͳȫ
ѹأhttp://www.sucop.com
רҵݰȫƷhttp://www.unnoo.com