aspack (a).txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 12 行

find eip,#60# 		// searches for pushad
cmp eip,$RESULT // compares if we are already at pushad command
je next 				// jumps sto if we are there
go $RESULT 		// executes till pushad
next:
sto						// step one command
bphws esp,"r"		// set hardware-breakpoint on ESP-value
run						// run target
cob						// wait till break occured
sto						// step
sto						// step
sto						// step