the amazing upx oep-finder v2.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 15 行

// The amazing UPX OEP finder v2
// This script will quickly put you at the OEP of an UPX-packed EXE.
// Just run it!
// Implemented using hardware breakpoints (just for fun).

eob Break 
findop eip, #61#
bphws $RESULT, "x"
run

Break:
sto 
sto
bphwc $RESULT
ret