May 28, 200718 yr Unpackt succesfull!!!http://files.to/get/461643/8763/tElock.rarHere is a script for tElock 0.99, i hope it works on other targets to."Ignore all exceptions"var tempvar temp1var ImgBasevar CodeEndvar CodeStartvar CodeSizegmi eip, MODULEBASEmov ImgBase, $RESULTmov temp, 3cadd temp, ImgBasemov temp, [temp]add temp, ImgBaseadd temp, 100mov CodeSize, [temp]add temp, 4mov CodeStart, [temp]add CodeStart, ImgBasemov CodeEnd, CodeStartadd CodeEnd, CodeSizegpa "LoadLibraryA", "kernel32.dll"add $RESULT, 2bp $RESULTrunbc $RESULTrtuString_Schleife:stomov temp, [eip]and temp, FFFFcmp temp, 858Djne String_Schleifestomov temp, eaxDeleteString:mov temp1, [temp]and temp1, FF000000cmp temp1, 0je FindOEPmov [temp], 0inc tempjmp DeleteStringFindOEP:bprm CodeStart, CodeSizeOEP_Schleife:runcmp eip, CodeStartjb OEP_Schleifecmp eip, CodeEndja OEP_Schleifebpmccmt eip, "OEP found by kNiGhT"msg "Dump and rebuild IAT!"retgreetz Edited May 28, 200718 yr by -kNiGhT-
Create an account or sign in to comment