upx protector 1.0x oep finder.txt

700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

/*
////////////////////////////////////////////////////
// UPX Protector 1.0x OEP finder
// Author: hacnho/VCT2k4
// Email : [e-mail]
// Website: http://nhandan.info/hacnho
// OS : WinXP Pro, OllyDbg 1.10 Final, OllyScript v0.85
////////////////////////////////////////////////////
*/
eob Break
sti
sti
findop eip, #60#
bphws $RESULT, "x"
Break:
run
sto
sti
an eip
log eip
cmt eip, "This is the OEP! Found by hacnho/VCT2k4"
MSG "Dumped and fix IAT now! Thanx for using my Script...!"
bphwc $RESULT
ret