pelock 2.04 oep-finder.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 31 行

/*
//////////////////////////////////////////////////////////////
// PE Lock NT 2.04 OEP finder      
// Author: hacnho/VCT2k4                                 
// Email : [e-mail]   
// Website: http://nhandan.info/hacnho                       
// OS : WinXP Pro, OllyDbg 1.10 Final, OllyScript v0.85 
/////////////////////////////////////////////////////////
*/

sti
sti
sti
sti
sti
sti
sti
eob Break
findop eip, #9DC3#
bphws esp,"r"
run

Break:
sto
sto
sto
an eip
log eip
cmt eip, "This is the OEP! Found by hacnho/VCT2k4"
MSG "Dumped and fix IAT now! Thanx for using my Script...!"
ret