acprotect1.22d.txt

masm 调试工具

/*
//////////////////////////////////////////////////
	UltraProtect 1.x/ACprotect 1.22 OEP Finder(Default mode,not for Delphi)
	Author:	loveboom
	Email : [e-mail]
	OS    : Win2kADV sp2,OllyDbg 1.1b,OllyScript v0.62
	Date  : 2004-3-28
	Config: Hide ollydbg(IsDebuggerPresent),Exceptions:uncheck "INT3 breaks".
	Note  : If you have one or more question, email me please,thank you!
//////////////////////////////////////////////////
*/

var bpaddr   //Break Point Address

start:
run

lbl1:
findop eip,#C3#
eob lbl2
bp $RESULT
esto

lbl2:
bc $RESULT
sto
mov bpaddr,esp
eob lbl3
bphws bpaddr,"r"
run

lbl3:
bphwc bpaddr
sto
sto

end:
cmt eip,"OEP found!please dumped it!"
msg "Script by loveboom[DFCG],Thank you for using my script!"
ret