00:00 This Constant is usually used for checking whether there is optional function being called. recorded by ~.
~¿¡ ÀÇÇØ ±â·ÏµÈ ÀÌ »ó¼ö´Â ´Ù¸¥ ÇÔ¼ö°¡ È£ÃâµÇ´ÂÁö ¾Ë¾Æº¸±â À§ÇØ ÁÖ·Î ¾²ÀÔ´Ï´Ù.
00:08 and so this a nice hint about the ~ function.
±×·¡¼ ÀÌ°ÍÀº ~ ÇÔ¼ö¿¡ ´ëÇÑ ÁÁÀº ÈùÆ®ÀÔ´Ï´Ù.
00:30 and at some point we are going to find some loop and encrypted record behind it. so it might be nice (one) to stop that because it¡¯s going to self-decrypt itself.
ƯÁ¤ ÁöÁ¡ºÎÅÍ ·çÇÁ¿Í ¾ÏÈ£ÈµÈ ·¹Äڵ带 ãÀ» ¼ö ÀÖ½À´Ï´Ù. (ÇÁ·Î±×·¥ÀÌ)¾Ë¾Æ¼ º¹È£È ÇÒ °ÍÀ̱⠶§¹®¿¡
ÁßÁö½ÃÅ°°Ú½À´Ï´Ù.
00:44 so I can just put an ~ point in to look
º¸±â À§ÇØ ~ Æ÷ÀÎÆ®¸¦ ³Ö°Ú½À´Ï´Ù.
00:58 this time exit to access and reload programme
ÀÌÁ¦ ÇÁ·Î±×·¥À» ²ô°í ´Ù½Ã Àç½ÇÇà ÇÏ°Ú½À´Ï´Ù.
02:11 ~ usually jumps directly over to entry points or they can use a register, it jumps registers, or they can ~ and create exceptions and it jumps to ~ program. So it might be a nice thing to check out.
~´Â º¸Åë ¹Ù·Î entry point·Î °¡±âµµ ÇÏ°í ·¹Áö½ºÅ͸¦ »ç¿ëÇϱ⵵ ÇÕ´Ï´Ù. ¶Ç ¾î¶² °æ¿ì¿¡´Â ~¸¦ Çؼ ¿¹¿Ü¸¦ ¸¸µé°í ~ ÇÁ·Î±×·¥À¸·Î °¡±âµµ ÇÕ´Ï´Ù. È®ÀÎÇØ º¸´Â °ÍÀÌ ÁÁ½À´Ï´Ù.
02:27 it¡¯s building it creates ~ function
ºôµåµÇ°í ÀÖ½À´Ï´Ù. ~±â´ÉÀ» ¸¸µé¾î ³À´Ï´Ù.
02:37 you can just put the brake point on it
Break point¸¦ »ðÀÔÇÏ°Ú½À´Ï´Ù.
03:29 so here we can see that the program is going to access the ~ structure, and is going to modify the IP register which is a ~ pointer so we have to look at the value of this register because this will be the next location the program is going to jump.
04:05 right inside the ¡¦¡¦ section. You can put the brake point on it, and just run the program.
¡¦¡¦ ¼½¼Ç ¾È¿¡ break Æ÷ÀÎÆ®¸¦ ³Ö°í ÇÁ·Î±×·¥À» ÀÛµ¿ ½ÃÅ°°Ú½À´Ï´Ù.
04:13 so we just passed the first ~ and now this is the second one
ÀÌÁ¦ ù ~À» Åë°úÇß°í ÀÌ°ÍÀÌ µÎ¹ø° ÀÔ´Ï´Ù.
04:32 At the end of the ~ section you can find a jump it¡¯s most likely to the one jumping to uhm to ~ programme.
~¼½¼Ç ³¡¿¡ ~ ÇÁ·Î±×·¥À¸·Î À̵¿ÇÒ °¡´É¼ºÀÌ ³ôÀº Jump¸¦ ãÀ» ¼ö ÀÖ½À´Ï´Ù.