// Script for OllyScript plugin by SHaG - http://ollyscript.apsvans.com
/*
//////////////////////////////////////////////////
PELock 1.0x -> Bartosz Wojcik Unpack script v0.1
Author: loveboom
Email : bmd2chen@tom.com
OS : WinXP sp1,Ollydbg 1.1,OllyScript v0.85
Date : 2004-7-19
Action: Auto fix IAT,Remove Junk code,Found stolen code
Config: Ignore other exceptions except 'Memory access violation'
Note : If you have one or more question, email me please,thank you!
//////////////////////////////////////////////////
*/
start:
msgyn "Setting:Ignore other exceptions except 'Memory access violation',Continue?"
cmp $RESULT,0
jne lbl1
ret
lbl1:
//Declare
var count
var espval //Esp value
var addr //address
var addr1
mov count,9
dbh //Hide debugger
run
lblloop:
cmp count,0
je lbl2
dec count
esto
jmp lblloop
lbl2:
find eip,#EB02#
bp $RESULT
esto
lbl3:
bc $RESULT
find eip,#F6C180# //Found 'Test cl,80'
cmp $RESULT,0
je lblabort
mov addr,$RESULT
cmt addr,"Running!please wait......!"
bphws addr,"x"
lbl4:
eoe lbl5
run
mov ecx,80
jmp lbl4
lbl5:
bphwc addr
find eip,#EB01??EB02#
mov addr,$RESULT
bp addr
esto
lbl6:
bc addr
mov addr,esp
bphws addr,"r"
run
bphwc addr
