pepack 1.0 oep finder #2.txt

700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

// PEPack 1.0 OEP finder

eob Break 
sto
sto
findop eip, #FFE0# 
bphws $RESULT, "x" 
run 

Break: 
bphwc $RESULT 
sto 
log eip 
ret