PDA

View Full Version : PEBundle 2.0x - 2.4x script

hacnho
June 27th, 2004, 18:45
/*
//////////////////////////////////////////////////////////////
// PEBundle 2.0x - 2.4x OEP finder
// Author: hacnho/VCT2k4
// Email : hacnho@hotmail.com
// Website: http://nhandan.info/hacnho ("http://nhandan.info/hacnho")
// OS : WinXP Pro, OllyDbg 1.10 Final, OllyScript v0.85
/////////////////////////////////////////////////////////
*/

sti
sti
eob Break
findop eip, #9D68#
bphws esp,"r"
run

Break:
sto
sto
sto
an eip
log eip
cmt eip, "This is the OEP! Found by hacnho/VCT2k4"
MSG "Dumped and fix IAT now! Thanx for using my Script...!"
ret
nanban
July 6th, 2004, 13:24
hai i used this script but i can't fine OEP, i can't rebuilt import can anybudy have turotial about pebundle. pls any one help me.. thanks

nanbna-n@yahoo.com
nanban
July 6th, 2004, 13:29
hai friends i am new to this form.. i am just like baby in program . i have 1 Q. i want know how to unpack pe bundle. i was used script also but it's not working ( or i don't know how to to it) pls. any one help me.. how to un pack pe bundle.. thanks.. nanban
hacnho
July 6th, 2004, 20:19
http://unpacking.free.fr/tuts/unpack/PEBundle/Tutorial-Manual-Unpackin g-PEBundle2.0x-2.4x.zip
("http://unpacking.free.fr/tuts/unpack/PEBundle/Tutorial-Manual-Unpacking-PEBundle2.0x-2.4x.zip
")

French tut!

PS: if you want a tut in english, i will write it!
nanban
July 7th, 2004, 03:44
i don't know french. if u have in english pls. let me know where i can found that.

thanks