crunch 5.0.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 23 行

// Crunch 5.0 OEP Finder
// Made by: GaBoR {RES}
findop eip, #60#
bphws $RESULT, "x"
run
bphwc $RESULT
sto
var t
mov t,esp
bphws t, "r"
run
bphwc t
sto
sto
sto
sto
sto
cmt eip,"This is the OEP! Found by GaBoR {RES}"
MSG "Dump & fix IAT"
ret