pebundle 2.0x.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 26 行

/* 
////////////////////////////////////////////////////////////// 
// PEBundle 2.0x - 2.4x OEP finder 
// Author: hacnho/VCT2k4 
// Email : [e-mail] 
// Website: http://nhandan.info/hacnho 
// OS : WinXP Pro, OllyDbg 1.10 Final, OllyScript v0.85 
///////////////////////////////////////////////////////// 
*/ 

sti 
sti 
eob Break 
findop eip, #9D68# 
bphws esp,"r" 
run 

Break: 
sto 
sto 
sto 
an eip 
log eip 
cmt eip, "This is the OEP! Found by hacnho/VCT2k4" 
MSG "Dumped and fix IAT now! Thanx for using my Script...!" 
ret