petite22.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 33 行

// Petite2.2 eop finder 
// By R@dier 2004
// 
MSG "please tick Memory Access Violation in options-> exceptions"
eoe here
var a
var b
var c
findop eip, #60#
bphws $RESULT, "x"
mov a,$RESULT
run
bphwc a
sti
bphws esp, "r"
mov b, esp
run
here:
esto
bphwc b
eob exit

jmp exit
exit:

sti
sti
log eip
cmt eip, "This is the entry point"
MSG "Arrived at entry point dump anytime and get imports"
ret