Anonymous
April 28th, 2004, 10:18
Ive this question;
i almost finished my script for PECompact 2.01 but on the end the ammount of pressing SHIFT-F9 (esto in script) differs per target.
How can i generally make it stop at the final breakpoint?
thanx in advance.
Anonymous
April 29th, 2004, 04:02
Well, this should be working just fine for the time beeing:
/*
PECompact 2.01a (27-04-04 release) OEP Finder by Scarabee.
Make sure you Select NO on 'Compressed code message' when loading application in Olly.
When at OEP, just dump and fix with IMPREC.
*/
var cbase
var csize
sto
sto
sto
sto
findop eax, #c3#
bp $RESULT
esto
esto
GMI eip, CODEBASE
mov cbase, $RESULT
GMI eip, CODESIZE
mov csize, $RESULT
bpwm cbase, csize
esto
sto
bpmc
findop eip, #FFE0#
bp $RESULT
MSG "From here, press SHIFT-F9 till break at 'JMP EAX'. Then F8 and you're on OEP!"
Hope it's usefull.
Powered by vBulletin® Version 4.2.2 Copyright © 2019 vBulletin Solutions, Inc. All rights reserved.