/*
//////////////////////////////////////////////////
Script for Winupack 0.37
Author: loveboom
Email : loveboom#163.com
OS : Winxp sp1,OllyDbg 1.1,OllyScript v0.92
Date : 2005-12-04
Config: Ignore all Exceptions.
Note :
//////////////////////////////////////////////////
*/
var addr
var apiaddr
var val
var bpaddr
start:
gpa "LoadLibraryA","kernel32.dll"
mov apiaddr,$RESULT
bp apiaddr
l3:
bc apiaddr
mov addr,[esp]
bp addr //卡吧之类的软件会hook api,保险点做法
esto
bc addr
mov addr,[esp]
cmp addr,0
je lw2
mov addr,esp
add addr,4
mov addr,[addr]
go addr
lend:
cmt eip,"OEP,Please dumped it,Enjoy!"
msg "Script by loveboom[DFCG],[FCG],Thank you for using my Scripts!"
ret